Manager, Security Incident Response Team (USA)
About Our Client
The organization operates in the DevSecOps industry, focusing on improving software development processes by enhancing developer productivity, operational efficiency, security, and compliance. It serves over 50 million registered users and supports more than half of the Fortune 100 companies. The organization's approach integrates AI as a key productivity tool and fosters a high-performance culture that values knowledge exchange and collaboration to solve complex software development challenges.
About the Opportunity
The Manager, Security Incident Response Team (USA) leads the security incident response team in the Americas region. This role is responsible for managing cybersecurity incident investigations across the organization's operating environments within a tierless SOC model. The position involves overseeing the team's day-to-day operations, developing team members' skills, ensuring high-quality incident response, and enhancing security defenses through proactive measures and automation.
Responsibilities
- Manage daily team operations by setting goals, performance expectations, and accountability.
- Coach and develop incident response engineers, providing feedback and fostering investigation excellence.
- Identify talent needs and participate in hiring to strengthen the team’s technical capabilities.
- Promote team engagement and retention through recognition and creating a safe feedback environment.
- Translate organizational strategy into actionable team priorities and keep team informed.
- Develop and improve incident response processes, runbooks, and team capabilities.
- Lead high-severity incident responses as an escalation point and incident commander.
- Cookordinate with cross-functional teams to resolve incidents and address security gaps.
- Use incident insights to drive security improvements and support a proactive defense mindset.
- Model and promote remote work best practices and asynchronous communication.
Requirements
- Experience managing and developing security engineering teams with accountability for results.
- Proven leadership in complex incident response operations from triage to retrospective.
- Techical expertise in security investigations, SIEM tools (e.g., Splunk, Elastic), and cloud platforms (GCP and/or AWS), including cloud forensics.
- Ability to represent security teams credibly during customer escalations.
- Skills in threat hunting based on intelligence and knowledge of supply chain threats for SaaS.
- Mindset oriented toward AI and automation for workflow optimization.
- Availability during US West Coast business hours; flexibility for occasional after-hours support.
Pay Range and Compensation Package
The pay range and compensation package for this role will be determined based on the candidate’s experience, skills, and other relevant factors.
Equal Opportunity Statement
Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.