Manager, Security Operations (Remote)

About the role

We are hiring a Manager, Security Operations to lead the team responsible for how Rula detects, investigates, responds to, and learns from security events. This person will manage and coach a team of engineers while remaining close to technical work such as detection design, alert tuning, incident response, runbooks, operations, and security automation.

Responsibilities

• Manage and coach a team of engineers
• Manage relationships with security operations vendors
• Work closely with Security, Engineering, IT, Compliance, Privacy, and external partners to improve Rula's ability to protect patient and provider data
• Build practical security operations in a high-trust environment

Requirements

• 5+ years of professional experience in security operations, detection engineering, incident response, threat hunting, cloud security, or a related security engineering role
• 2+ years of direct people management experience for security engineers, incident responders, analysts, or a security operations / detection and response team
• Hands-on proficiency building, tuning, and operating detections in a modern SIEM and managing a SOAR tool (and/or comparable security operations solutions)
• Demonstrated expertise leading or materially contributing to incident response, including triage, containment, stakeholder communication, and post-incident improvements
• Working knowledge of cloud service provider and SaaS security telemetry, identity logs, endpoint security signals, and common attacker behaviors

Preferred Qualifications

• Experience in healthcare or another regulated environment where incident response, privacy, and compliance requirements intersect
• Experience owning an MDR provider relationship, defining escalation quality expectations, running vendor reviews, and improving vendor-to-internal handoff workflows
• Experience applying MITRE ATT&CK, threat hunting methods, or detection engineering frameworks to prioritize coverage gaps
• Proficiency querying and analyzing security data using SQL, Python, or similar tools; familiarity with security data lakes, OCSF, Athena, Trino, Panther, or comparable platforms is helpful
• Experience building or improving security on-call, shared escalation models, incident command, tabletop exercises, or post-incident review practices
• Relevant security certifications such as OSCP, GCIH, GCIA, GCFA, or GSOC

Benefits

We're serious about your well-being! As part of our team, full-time employees receive:

• 100% remote work environment
• Attractive pay and benefits
• Comprehensive health benefits
• 401(k) plan access
• Grossly generous time-off policies
• Paid parental leave
• Employee Assistance Program (EAP)
• Quarterly department stipend
• Fun team-building activities or in-person gatherings
• Community and employee resource groups
• New hire home office stipend
• $50 monthly stipend to help cover internet or cell phone expenses
• Wellness at Rula program
• Year-round wellness initiatives and a $50/month wellness stipend

Our team

We believe that diversity, equity, and inclusion are fundamental to our mission of making mental healthcare work for everyone. We are dedicated to having a culture of inclusion that will support our employees in feeling safe, seen, heard, and valued.