Senior Manager, Security Engineering & Operations

J.D. Power•Virginia - Remote, VA

8d•$160,000 - $200,000•Remote

About The Position

The Senior Manager will lead JD Power’s combined Security Engineering and Operations function for North America, overseeing vulnerability management, incident response, threat hunting, and hands-on security engineering. The role will establish a managed vulnerability service engagement, define service-level agreements and remediation processes, and help shift the team from crisis-mode incident response toward proactive threat management and strategic engineering. It requires operational discipline and technical credibility. The role leads and develops a team of security engineers, establishes vulnerability management and incident response programs, oversees the 24x7 on-call rotation, and reports team and program metrics to the CISO. It also involves hands-on security engineering, collaboration with cloud, infrastructure, and development teams, and coaching the team on automation and process improvement. The position is remote in the USA or Canada and reports to the Chief Information Security Officer. It is a full-time role. The starting salary range is $130,000–$170,000 CAD or $160,000–$200,000 USD per year. Eligible employees may participate in company-sponsored benefits, which vary by country and employment status.

Requirements

12 or more years in security operations, incident response, or security engineering roles, with hands-on technical depth.
7 or more years managing security teams of at least five engineers, with demonstrated team development and coaching ability.
Hands-on experience with SIEM, vulnerability scanning, remediation tracking, and detection rule development.
Proven track record transitioning teams from reactive incident response to proactive threat hunting and engineering.
Experience managing managed security service provider (MSSP) or managed vulnerability service engagements.
Strong leadership ability and commitment to team development, sustainability, and psychological safety.
Must be legally authorized to work in the country where employment is offered; employment sponsorship is not provided.

Nice To Haves

CISSP, CISM, or CEH certification.
Experience with Nessus, Qualys, or similar vulnerability management platforms.
Background in incident response program maturity, metrics, and automation.
Experience scaling security operations in growth-stage organizations.

Responsibilities

Lead and develop the Security Operations Engineer, Senior Security Engineer, and Security Engineers, building high-performing teams and a coaching culture.
Establish a vulnerability management program with partners, including service-level agreements, tracking mechanisms, remediation governance, and executive reporting.
Design and maintain enterprise incident response procedures, playbooks, escalation paths, and threat intelligence integration.
Oversee the 24x7 on-call rotation and work with HR and operations to improve sustainability and reduce burnout while maintaining response quality.
Manage the transition from crisis response to strategic engineering and modernization work.
Develop detection, response, and remediation KPIs and report quarterly to the CISO on team metrics and program health.
Lead hands-on security engineering projects, including infrastructure hardening, threat hunting, and controls validation.
Work with Cloud Platform, Infrastructure, and Development teams to embed security into engineering practices.
Mentor the team on automation, scripting, and process improvement to reduce manual toil.

Benefits

Medical insurance
Dental insurance
Vision insurance
Disability insurance
Life insurance
Retirement savings programs
Paid time off
Wellness programs
Flexible work arrangements
Learning and development opportunities
Other company-sponsored benefits; benefits vary by country and employment status