Manager, Information Security Operations - Remote US

Malwarebytes

2d•Remote

About The Position

Malwarebytes/ThreatDown is looking for an experienced and motivated security leader who is looking to take on the challenge of building and running Security Operations at a Security company. We’re looking for someone to lead and develop our global Security Operations team, owning 24x7 alert monitoring, SIEM management, vulnerability management, investigations, incident response, threat hunting, DLP, internal pentesting, security reviews, and AI tooling reviews. We’re looking for a security leader who can help take our SecOps program to the next level.

Requirements

5-8 years of experience in information security ops as an individual contributor
2-5 years of experience managing and developing a Security Operations or SOC team, ideally across multiple regions and time zones
SaaS, Software Development, Tech and/or Fintech experience is required.
Some proven experience handling AI security
Well-versed in SecOps best practices across SIEM management, vulnerability management, investigations, incident response, and threat hunting
Experience owning or contributing to DLP, internal penetration testing, and security review programs
Proven experience handling AI security, including risk assessment and governance of AI tools, models, and integrations used across the business
Ability to work with teams across the organization to improve security in infrastructure, cloud and enterprise environments
Effective in managing multiple priorities, projects, and a distributed team in a fast-paced environment
Passionate about process improvements, documentation, and automation
Strong oral and written communication skills, with the ability to present to stakeholders with varying levels of technological experience
Skilled at coaching, mentoring, and developing talent, including conducting performance reviews and providing feedback
Lead by example to improve communications and processes within and across teams
Understand the value in your team having ‘measurable success’

Nice To Haves

Experience using industry standard SIEM tools
Experience working at a security product company
An understanding of cloud technologies and infrastructure
Experience managing or mentoring geographically distributed, global teams
Current or former security leadership or technical certifications such as CISSP, CISM, SANS GPEN, CEH or similar are a plus

Responsibilities

Lead and develop a global team of Security Operations analysts and engineers, providing 24x7 coverage and protection for the company.
Own 24x7 alert monitoring, ensuring timely triage, escalation, and resolution of security events.
Manage the SIEM platform, including log ingestion, detection rule tuning, and coverage across the environment.
Direct vulnerability management, including scanning, prioritization, and remediation tracking across systems and applications.
Lead security investigations and incident response, acting as the primary point of escalation for the Security Operations team.
Develop and mature proactive threat hunting capabilities to identify risks before they become incidents.
Oversee Data Loss Prevention (DLP) tooling and policy enforcement to protect sensitive company data.
Lead internal (non-product) penetration testing efforts to validate security controls and identify gaps.
Conduct security reviews of new tools, vendors, and internal projects to assess and mitigate risk.
Own the evaluation and review of AI tooling adopted across the company, ensuring alignment with security standards.
Develop and implement Security Operations policies, procedures, and documentation to ensure consistent, high-quality service delivery.
Collaborate with other departments — engineering, product management, research, threat intelligence, support, IT, finance, legal, and other corporate functions — to ensure security operations meet the broader needs and goals of the company.
Conduct regular performance reviews of Security Operations staff and provide development guidance and feedback.
Manage 3rd party providers for MSSP, MDR, and other security operations activities.
Act as a senior point of escalation during active incidents, including outside standard business hours.
Occasional on-call duties as requested.