Manager Security Engineer, Operations

Fivetran•Remote, Massachusetts, United States, AMER, MA

5d•$186,701 - $233,376•Remote

About The Position

Fivetran + dbt is seeking a Manager of Security Operations, Incident Detection and Response, to improve the security and robustness of its platform and enterprise. This hands-on, execution-focused people-leadership role requires expertise in security operations, incident detection and response, AI-driven security automation, and securing multi-tenant SaaS environments. The manager will build and lead a high-performing team, own the detection and response technology stack, and be accountable for enterprise incident response, ensuring threats are detected, contained, and remediated across endpoints, cloud, and production. This is a full-time remote position based in the United States, in the EST time zone. The role uses tools and technologies including CrowdStrike, Okta, Google Workspace, Wiz, open-source tools, Notion, and JIRA.

Requirements

Deep expertise in detecting, investigating, and responding to security incidents, with a track record of leading enterprise-wide incident response.
Proven experience managing, hiring, and developing security teams, including setting priorities, managing performance, and building a strong team culture.
Extensive experience securing and responding to incidents in large-scale multi-tenant SaaS environments, including understanding tenant isolation and customer data protection.
Hands-on experience applying AI, including LLMs and AI agents, to automate security detection, triage, and response, and a strong understanding of AI-related risks.
Strong experience with cloud platforms such as AWS, GCP, or Azure, Kubernetes, and containerized environments, including cloud-native logging and detection.
Proficiency with SIEM, SOAR, EDR/XDR, identity, and cloud detection tools, and experience integrating them into automated workflows.
Experience owning a security technology roadmap, including tool selection, budgets, and vendor management.
Excellent problem-solving and troubleshooting skills, including making sound decisions under pressure in fast-paced environments.
Strong communication skills and the ability to collaborate with and educate engineering teams and communicate clearly with executives and customers during incidents.
Curiosity, urgency, and a hands-on approach to complex technical problems.

Responsibilities

Lead, mentor, and develop detection and response engineers and analysts; set goals, manage performance, and foster ownership, curiosity, and urgency.
Recruit, hire, and onboard security talent; define team structure, roles, on-call rotations, and hiring plans.
Own the enterprise incident response program, including investigation, containment, eradication, remediation, and post-incident review.
Serve as incident commander for major security events and coordinate with Legal, Privacy, Communications, and executive leadership.
Build, optimize, and maintain high-fidelity detections across cloud, identity, endpoint, SaaS, and application layers, using threat-informed approaches such as MITRE ATT&CK.
Drive adoption of AI, including LLMs and AI agents, to automate alert triage, enrichment, investigation, and response; evaluate and integrate AI capabilities and build detections for threats targeting AI systems and usage.
Design detection and response strategies for a multi-tenant SaaS platform, including tenant isolation, cross-tenant access, and customer data protection.
Lead customer-impacting incident response and coordinate customer notifications.
Own the security operations technology stack, including SIEM, SOAR, EDR/XDR, cloud detection and response, and log pipelines; manage the roadmap, budget, and vendor relationships.
Lead proactive threat hunting and integrate threat intelligence to identify and mitigate emerging threats.
Collaborate with engineering, infrastructure, IT, application security, and GRC teams to integrate detection and response practices and remediate risks across build pipelines, runtime environments, and corporate systems.
Develop and maintain automation, playbooks, and integrations to streamline security processes and provide self-service security tools.
Implement consistent security controls, monitoring, and alerting across the enterprise; define and report metrics such as MTTD and MTTR and support compliance requirements.
Stay current with security operations, incident response, cloud security, and AI security trends and apply relevant knowledge to improve the platform's security posture.

Benefits

100% employer-paid medical insurance
Generous paid time away, including paid vacation or flexible/unlimited vacation depending on role and country, and paid sick time
Inclusive parental leave
Paid holidays, including a year-end Global Week of Rest
Volunteer days off
RSU stock grants
Professional development and training opportunities
Company virtual happy hours, free food, and team-building activities
Monthly cell phone stipend
Access to a mental health support platform offering therapy, coaching, and self-guided mindfulness resources for covered employees and dependents