Manager II, Security Operations

SPS Commerce•Minneapolis, MN

6d•$133,800 - $204,100•Hybrid

About The Position

As a Manager II, Security Operations on our Cyber Engineering & Defense team, you will lead Security Operations at SPS Commerce, directly managing Cyber Defense engineers and analysts while owning an 8-person L1/L2 SOC contractor pod under a managed-services model. You'll be accountable for SOC operational performance, including detection quality, triage accuracy, and time-to-containment, serving as incident commander for Sev1 and escalated security incidents. This role also owns a growing layer of AI agents performing triage, enrichment, and response orchestration work alongside human analysts, and partners closely with the Agentic Cyber Engineering (ACE) function to define and deliver agentic capabilities. You'll operate independently, translating Cyber Defense strategy into a tactical SecOps roadmap.

Requirements

8+ years in security operations, detection engineering, or incident response
Experience maturing Cyber capabilities and driving organizational transformation
Demonstrated Sev1 incident command experience with cross-functional engineering and executive communications
Track record of owning a multi-quarter security program end-to-end including roadmap, execution, and measurable risk reduction
Experience owning MSP/MSSP relationships at scale, including renewal economics, scope changes, and consolidation decisions
Working knowledge of EDR, SIEM, SOAR, and ticketing tooling comparable to the SPS Cyber Defense stack, such as CrowdStrike, NG-SIEM/Panther/Splunk/Sentinel, Tines/Torq/Phantom, and Jira
Demonstrated ability to coach engineers, run effective 1:1s, and deliver clear performance feedback
3+ years of direct people management including hiring, performance management, and career development preferred

Nice To Haves

Direct experience with the SPS stack including CrowdStrike Falcon, Panther, Tines, AWS, EKS, and Atlassian preferred
Familiarity with supply chain attack patterns and CI/CD security preferred
Experience working with distributed or offshore SOC teams preferred
Demonstrated experience directing or overseeing AI agents in an operational service-delivery context, including designing escalation thresholds, human-in-the-loop review points, and quality control for agent-produced work preferred
Experience with agentic frameworks and orchestration such as LangGraph or agent tool-use pipelines in a security operations or detection-and-response context preferred
Industry certifications such as GIAC GCIH/GCIA/GCDA, OSCP, or CISSP preferred

Responsibilities

Own SOC operational performance, including alert triage MTTD/MTTR, true-positive rate, ticket throughput, and time-to-containment across the Cyber Defense engineering and analyst function and the 8-person L1/L2 SOC contractor pod
Serve as incident commander for Sev1 and escalated security incidents, including severity determination, cross-functional and executive communications, and resolution path
Own operational accountability for AI agents deployed in the SOC and detection-and-response pipeline, including escalation thresholds, human-in-the-loop checkpoints, and output quality
Own the day-to-day MSP/contractor relationship for the 8-person L1/L2 SOC pod, including onboarding, performance, retention, and escalation quality
Translate Cyber Defense strategy into a tactical SecOps roadmap, owning the SecOps Jira project and quarterly sequencing within the broader Cyber Defense strategy
Own operational quality of core Cyber Defense tooling including SIEM detection content lifecycle and source health, CrowdStrike platform administration including the NG-SIEM migration, and SOAR runbooks
Run a healthy 24x7 on-call rotation across FTE and contractor coverage, protecting against alert fatigue
Provide day-to-day management, coaching, and career development for Cyber Defense engineers and analysts, including weekly 1:1s and written growth plans
Partner with the Agentic Cyber Engineering (ACE) function on capability definition, development, and delivery of systems to drive and accelerate agentic transformation