Director of Security Operations and Engineering

EDB

11h•Remote

About The Position

EDB provides a data and AI platform that enables organizations to harness the full power of Postgres for transactional, analytical, and AI workloads across any cloud, anywhere. EDB empowers enterprises to control risk, manage costs and scale efficiently for a data and AI led world. Serving more than 1,500 customers globally and as the leading contributor to the vibrant and fast-growing PostgreSQL community, EDB supports major government organizations, financial services, media and information technology companies. EDB’s data-driven solutions enable customers to modernize legacy systems and break data silos while leveraging enterprise-grade open source technologies. EDB delivers the confidence of up to 99.999% high availability with mission critical capabilities built in such as security, compliance controls, and observability. For more information, visit www.enterprisedb.com The Role: You'll lead Security Operations and Security Engineering at EDB, reporting to the CISO as a trusted member of the security leadership team. You own how we detect, respond, and (increasingly) prevent. That means the people, the platforms, and the playbooks behind threat detection, incident response, and the engineering that makes them scale. You'll be a peer to the leaders across security, including Governance, Risk & Compliance and Application Security & Vulnerability Management, and you'll help shape the direction of the broader InfoSec organization. You'll also partner closely with peer leaders in IT and Product, because most of the controls we define live in their systems, pipelines, and roadmaps. This is a scaling role. The business is growing fast, and so is everything security has to cover: more products, more cloud, more acquired companies and environments to bring up to a common standard. You'll decide what to build, what to automate, and where to add people, so the program grows ahead of the risk instead of behind it. As EDB grows, so will the scope and opportunity of the role. One leader owns both Security Operations and Security Engineering on purpose: the best incident is the one that never happens. What we learn from detection and response feeds directly into the engineering of preventive controls, so we move from detecting bad things to making them impossible, and from manual triage to automation and agents that give analysts leverage. If you want to build that, and grow a program and a team as the company grows, this is the seat. What your impact will be: Incident response end to end, from intake and severity model through after-action and improvement, including partnership with Legal on investigations Detection engineering, threat hunting, and the SIEM, EDR, SOAR, and cloud security platforms that support them Security Engineering strategy and delivery, with the goal of preventing incidents rather than responding to them: preventive controls, least privilege, and identity assurance across employees, contractors, and build systems The insider threat program, built with HR, Legal, and IT Automation and agentic AI that extends analyst capacity (the analyst always owns the decision) Security integration of acquired companies and new environments into EDB's standards Close partnership with IT and Product leadership to build preventive controls into the platforms, pipelines, and products they own, plus security input to third-party risk and device posture with GRC Scaling the program: the org design, operating rhythms, roadmap, budget, and vendor strategy that let coverage grow with the business without growing linearly with headcount

Requirements

5+ years of management experience leading security teams
7+ years of hands-on experience in security operations, incident response, detection, or security engineering
A track record of scaling a security function through rapid growth (hiring, automation, and operating discipline), not just running one
Strategic thinking that goes beyond the immediate scope of the role
The ability to translate technical risk into business impact for executives, legal, customers, and your IT and Product counterparts
Comfort in a global, remote-first environment with flexible schedules and on-call responsibilities

Nice To Haves

Hands-on scripting or automation experience (Python, Go, etc.)
Experience applying AI or agent-based automation to security workflows
Cloud security experience and background in M&A security integration
Experience building an insider threat or identity assurance program

Responsibilities

Incident response end to end, from intake and severity model through after-action and improvement, including partnership with Legal on investigations
Detection engineering, threat hunting, and the SIEM, EDR, SOAR, and cloud security platforms that support them
Security Engineering strategy and delivery, with the goal of preventing incidents rather than responding to them: preventive controls, least privilege, and identity assurance across employees, contractors, and build systems
The insider threat program, built with HR, Legal, and IT
Automation and agentic AI that extends analyst capacity (the analyst always owns the decision)
Security integration of acquired companies and new environments into EDB's standards
Close partnership with IT and Product leadership to build preventive controls into the platforms, pipelines, and products they own, plus security input to third-party risk and device posture with GRC
Scaling the program: the org design, operating rhythms, roadmap, budget, and vendor strategy that let coverage grow with the business without growing linearly with headcount