Senior Manager, Security Engineering

Morningstar•Chicago, IL

1d•$151,975 - $233,025•Onsite

About The Position

Morningstar’s Security Operations & Engineering group protects its corporate environment, products, and supporting cloud platforms. This role leads the Security Engineering team, which owns the tools and platforms enabling security detection, response, and prevention, including endpoint protection, email security, SOAR, detection engineering, and cloud security posture management. The team also provides shared security foundations for product development, such as security scanning in pipelines, hardened container images, and library integrations. The Senior Manager sets team priorities, develops engineers, and ensures security platforms provide the SOC and business with the visibility, automation, and protection they need. The role guides security foundations used by product teams, remains involved in solving complex technical problems, and shapes collaboration between engineering and incident response. It reports to the Director of Security Operations & Engineering and is based on-site in Chicago, IL. The position may be filled at the Manager or Senior Manager level depending on experience and leadership scope. It includes an infrequent, emergency-only escalation rotation outside normal business hours.

Requirements

At least 4 years of people management experience, or equivalent technical leadership experience, in security engineering or security operations, with examples of developing people and delivering engineering work.
Hands-on security engineering knowledge and ability to troubleshoot complex problems with the team.
Experience with SIEM, endpoint detection and response, cloud security posture management, and security automation or orchestration; comparable tools are welcome.
Cloud security experience in a large, multi-cloud environment, ideally including AWS at scale.
Knowledge of incident investigation, containment, and post-incident improvement.
Sound technical judgment and clear communication with engineers, analysts, senior leaders, and colleagues in globally distributed teams.

Nice To Haves

CI/CD security experience, including static application security testing (SAST), software composition analysis (SCA), secrets scanning, and infrastructure-as-code (IaC) scanning.
CISSP, CISM, or GIAC certifications.

Responsibilities

Lead and develop security engineers and the incident response lead; set expectations, plan workloads, and support hiring, performance management, and career growth.
Own the engineering roadmap for detection and security platforms, balancing operational needs with architecture, platform health, and technical debt.
Work with the 24x7 SOC to improve detections and playbooks, automate manual work with XSOAR or Tines, and apply AI to improve detection, triage, and response.
Track detection quality, automation coverage, and response performance, and communicate progress and risk to senior leaders.
Support the incident response lead with complex investigations and containment, ensure responders have appropriate tools and support, translate lessons learned into engineering improvements, and troubleshoot with engineers.
Partner with product development, cloud platform, and infrastructure teams to strengthen security across AWS, GCP, and Azure while supporting product delivery.
Integrate automated security checks into product teams’ CI/CD pipelines, including Harness, and help secure agentic and AI-assisted development pipelines.

Benefits

100% 401(k) match up to 6% of salary.
Stock ownership potential.
Company-provided life insurance equal to 1x salary plus commission.
Comprehensive medical, dental, and vision benefits, with potential premium discounts and company-provided HSA contributions of up to $500–$2,000 annually for specific plans and coverages.
Additional medical wellness incentives of up to $300–$600 annually.
Company-provided long- and short-term disability insurance.
Trust-based time off.
Six-week paid sabbatical program.
Six-week paid family caregiving leave.
Paid parental leave of 8–24 weeks.
Adoption assistance.
Leadership coaching and formal mentorship opportunities.
Annual flex stipend of $1,000 for personal education and well-being expenses.
Tuition reimbursement.
Charitable matching gifts program.
Dollars for Doers volunteer program.
Paid volunteering days.
15+ employee resource and affinity groups.
Hybrid work model, typically four days in-office each week, with other benefits available to enhance flexibility.