Manager, Security Operations (Remote)

Rula•Los Angeles, CA

2d•Remote

About The Position

We are hiring a Manager, Security Operations to lead the team responsible for how Rula detects, investigates, responds to, and learns from security events. This person will manage and coach a team of engineers while remaining close to technical work such as detection design, alert tuning, incident response, runbooks, operations, and security automation. You will manage the relationships with security operations vendors and work closely with Security, Engineering, IT, Compliance, Privacy, and external partners to improve Rula's ability to protect patient and provider data. The right candidate will have agency and support to build practical security operations in a high-trust environment where clear communication, sound judgment, and measurable outcomes matter more than titles or jargon.

Requirements

5+ years of professional experience in security operations, detection engineering, incident response, threat hunting, cloud security, or a related security engineering role
2+ years of direct people management experience for security engineers, incident responders, analysts, or a security operations / detection and response team
Hands-on proficiency building, tuning, and operating detections in a modern SIEM and managing a SOAR tool (and/or comparable security operations solutions)
Demonstrated expertise leading or materially contributing to incident response, including triage, containment, stakeholder communication, and post-incident improvements
Working knowledge of cloud service provider and SaaS security telemetry, identity logs, endpoint security signals, and common attacker behaviors

Nice To Haves

Experience in healthcare or another regulated environment where incident response, privacy, and compliance requirements intersect
Experience owning an MDR provider relationship, defining escalation quality expectations, running vendor reviews, and improving vendor-to-internal handoff workflows
Experience applying MITRE ATT&CK, threat hunting methods, or detection engineering frameworks to prioritize coverage gaps
Proficiency querying and analyzing security data using SQL, Python, or similar tools; familiarity with security data lakes, OCSF, Athena, Trino, Panther, or comparable platforms is helpful
Experience building or improving security on-call, shared escalation models, incident command, tabletop exercises, or post-incident review practices
Relevant security certifications such as OSCP, GCIH, GCIA, GCFA, or GSOC

Responsibilities

Lead the team responsible for detecting, investigating, responding to, and learning from security events.
Manage and coach a team of engineers.
Remain close to technical work such as detection design, alert tuning, incident response, runbooks, operations, and security automation.
Manage relationships with security operations vendors.
Work closely with Security, Engineering, IT, Compliance, Privacy, and external partners to improve Rula's ability to protect patient and provider data.

Benefits

100% remote work environment
Working hours to support a healthy work-life balance
Attractive pay and benefits
Full transparency of pay ranges
Comprehensive health benefits: Medical, dental, vision, life, disability, and FSA/HSA
401(k) plan access
Generous time-off policies
2 company-wide shutdown weeks each year for self-care
Paid parental leave
Employee Assistance Program (EAP)
Quarterly department stipend
Community and employee resource groups
Home office stipend
$50 monthly stipend to help cover internet or cell phone expenses
Wellness at Rula program
$50/month wellness stipend