Manager of Response, Automation, Intelligence & Detection Engineering

About the role

The Manager of Response, Automation, Intelligence and Detection Engineering (RAID) within SecOps leads the Detection & Response and Threat Intelligence organizations across North America. This role sets the technical vision, organizational strategy, and execution priorities for both teams. It involves maturing Robinhood's detection and incident response capabilities, defining and tracking operational metrics, leading security incident response, partnering with various departments, driving adoption of automation and AI, and contributing to long-term security strategy.

Responsibilities

• Lead the Detection & Response and Threat Intelligence organizations across North America, setting the technical vision, organizational strategy, and execution priorities for both teams.
• Mature Robinhood's detection and incident response capabilities by improving detection coverage, response workflows, operational readiness, and measurable security outcomes.
• Define and track operational metrics such as detection coverage, response time, investigation quality, and control effectiveness, using data to continuously improve team performance.
• Lead security incident response for high-severity events, serving as an Incident Commander when needed and ensuring thorough post-incident reviews that drive lasting improvements.
• Partner with Security Engineering, Infrastructure, Product Security, Trust & Safety, and Engineering leaders to translate emerging threats into scalable detection, response, and prevention capabilities.
• Drive adoption of automation, AI, and modern engineering practices to improve analyst productivity, accelerate investigations, and scale security operations.
• Contribute to long-term security strategy, annual planning, budgeting, and organizational design as the Detection & Response program continues to grow.

Requirements

• 8+ years of experience in security operations, incident response, detection engineering, threat intelligence, or a closely related security discipline.
• 4+ years of experience leading high-performing security engineering or security operations teams, including hiring, coaching, and organizational development.
• Demonstrated experience building and scaling detection and response programs, including incident response, detection engineering, operational processes, and security metrics.
• Experience leading high-severity security incidents and coordinating cross-functional response efforts involving engineering, communications, legal, and executive stakeholders.
• Strong technical foundation across modern cloud environments, endpoint security, identity systems, SIEM, EDR, and detection engineering practices, with the ability to provide technical leadership without needing to be the primary implementer.
• Experience applying automation, AI, or software engineering practices to improve the scale and effectiveness of security operations.
• Excellent communication and stakeholder management skills, with the ability to influence engineering leaders and clearly communicate technical risk to executive audiences.
• Demonstrated ability to balance strategic planning with operational execution in a fast-paced, high-growth environment.

Qualifications

• BS in Computer Science, Information Security, or a related field.
• CISSP, CEH, or equivalent certifications preferred.

Skills

• Cloud environments (AWS, Azure, GCP).
• Endpoint security (FireEye, CrowdStrike, etc.).
• SIEM (Splunk, QRadar, etc.).
• EDR (CrowdStrike Falcon, Carbon Black, etc.).
• Modern detection engineering practices.
• Automation and AI in security operations.
• Communication and stakeholder management.

Benefits

Robinhood offers a comprehensive benefits package including:

• Best-in-class benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents.
• Lifestyle wallet — a highly flexible benefits spending account for wellness, learning, and more.
• Employer-paid life & disability insurance, fertility benefits, and mental health benefits.
• Time off to recharge including company holidays, paid time off, sick time, parental leave, and more!

Pay

The expected base pay range for this role is based on the location where the work will be performed and is aligned to one of 3 compensation zones. For other locations not listed, compensation can be discussed with your recruiter during the interview process.

Schedule

This role is based in our Menlo Park, CA or Denver, CO office(s), with in-person attendance expected at least 5 days per week.