Senior Manager, Security Operations - Detection Engineering & Incident Response

Pure Storage•Santa Clara, CA

9d•Onsite

About The Position

Everpure (NYSE: P) is seeking a Senior Manager of Security Operations to lead and scale its global Detection Engineering and Cloud Incident Detection & Response (CIDR) teams. The role focuses on transforming SecOps into a proactive, intelligence-driven defense engine to reduce risk across cloud, SaaS, infrastructure, and endpoint environments. This involves partnering with GRC, Infrastructure, Product Security, and Engineering leadership to establish operational plans, detection standards, and response strategies against sophisticated global threats.

Requirements

SecOps & Incident Leadership Expertise: Proven track record of leading and scaling enterprise security operations, detection engineering, and incident response functions across hybrid cloud and SaaS environments.
Advanced Technical & Telemetry Mastery: Deep technical command of SIEM and SOAR platforms, EDR solutions, cloud telemetry architectures, and detection-as-code principles integrated with modern CI/CD pipelines.
Threat Modeling & Governance Savvy: Comprehensive mastery of threat-informed defense methodologies, MITRE ATT&CK framework mapping, and control validation through atomic testing and threat hunting.
Executive Communication & Cross-Functional Influence: Demonstrated ability to interact with executive leadership, navigate complex risk discussions with Infrastructure and Engineering teams, and align technical posture with business priorities.

Responsibilities

Direct Detection Engineering & Incident Response Strategy: Establish operational objectives, work plans, and SLAs across threat detection, automated response workflows, and incident triage to continuously optimize Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).
Champion Threat-Informed Detection & Validation: Lead the deployment and continuous refinement of a high-signal detection inventory mapped to MITRE ATT&CK, validating control efficacy through automated simulations, red/purple team exercises, and threat hunt findings.
Streamline Telemetry Ingestion & Automation: Oversee the architectural ingestion of multi-cloud (AWS, Azure), endpoint, network, and SaaS log sources into SIEM and SOAR pipelines, reducing false positives and accelerating automated remediation.
Lead Executive Incident Governance & Postmortems: Direct major incident response efforts, oversee root-cause analyses, and translate complex security metrics into actionable executive dashboards and board-level risk reports that drive cross-functional remediation.
Manage & Develop SecOps Engineering Teams: Direct resource allocation, budget priorities, and professional development across multiple specialized security squads, cultivating a high-performing team culture focused on operational excellence.