Senior Manager, Security Operations - Detection Engineering & Incident Response

Everpure•Santa Clara, CA

10d•$225,000 - $281,000•Onsite

About The Position

Everpure (NYSE: P) is a data platform company with significant revenue growth and a strategic focus on the AI ecosystem. This role is for a Senior Manager of Security Operations to lead and scale global Detection Engineering and Cloud Incident Detection & Response (CIDR) teams. The mission is to transform SecOps into a proactive, intelligence-driven defense engine, reducing risk across cloud, SaaS, infrastructure, and endpoint environments. This involves partnering with GRC, Infrastructure, Product Security, and Engineering leadership to establish operational plans, detection standards, and response strategies against sophisticated global threats.

Requirements

Proven track record of leading and scaling enterprise security operations, detection engineering, and incident response functions across hybrid cloud and SaaS environments.
Deep technical command of SIEM and SOAR platforms, EDR solutions, cloud telemetry architectures, and detection-as-code principles integrated with modern CI/CD pipelines.
Comprehensive mastery of threat-informed defense methodologies, MITRE ATT&CK framework mapping, and control validation through atomic testing and threat hunting.
Demonstrated ability to interact with executive leadership, navigate complex risk discussions with Infrastructure and Engineering teams, and align technical posture with business priorities.

Responsibilities

Establish operational objectives, work plans, and SLAs for threat detection, automated response workflows, and incident triage to optimize Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).
Lead the deployment and refinement of a high-signal detection inventory mapped to MITRE ATT&CK, validating control efficacy through automated simulations, red/purple team exercises, and threat hunt findings.
Oversee the architectural ingestion of multi-cloud (AWS, Azure), endpoint, network, and SaaS log sources into SIEM and SOAR pipelines, reducing false positives and accelerating automated remediation.
Direct major incident response efforts, oversee root-cause analyses, and translate complex security metrics into actionable executive dashboards and board-level risk reports.
Direct resource allocation, budget priorities, and professional development across multiple specialized security squads, cultivating a high-performing team culture.