Sr. Security Operations Manager

Addepar

10d•$172,000 - $269,000

About The Position

Addepar is seeking a senior leader to run its Global Security Operations team within the Information Security & Risk organization. The role owns the day-to-day detection and response function, serves as incident commander for major security incidents, and partners with a 24/7 managed security services provider (MSSP) to identify and handle threats. The manager will set operational objectives and strategy, lead and develop a globally distributed team, shape detection for threats specific to Addepar, and ensure incidents lead to accountable follow-through and lasting fixes across the business. The role will also modernize Security Operations with AI and automation (AIOps) to improve triage, investigation and response. The position participates in a global on-call rotation and may require responding to critical security events outside standard working hours. Applicants must be legally authorized to work in the United States for any employer, without current or future visa sponsorship, and authorized to begin work in the U.S. on their first day.

Requirements

8+ years of experience in security operations, detection engineering or incident response.
3+ years of people-management experience, with a track record of mentoring and developing security teams.
Proven experience acting as incident commander for security incidents, including leading response, coordinating multiple workstreams, running postmortems and driving action items to completion.
Hands-on experience with Amazon Web Services (AWS), including investigating and responding to cloud security events.
Bachelor’s degree in Computer Science, Cyber Security or a related field, or equivalent experience.
Clear communication with technical and non-technical audiences, including senior leadership, and ability to influence peers and leaders in sensitive situations.
Ability to bring structure to ambiguous, fast-moving situations and remain composed under pressure.
Legal authorization to work in the United States for any employer without current or future visa sponsorship, and authorization to begin work in the U.S. on the first day of employment.

Responsibilities

Lead day-to-day operations of the Global Security Operations team and serve as incident commander for major security incidents.
Manage and develop a globally distributed team, including mentorship, training, roadmap and OKR setting, and on-call coverage across time zones.
Own the relationship with the 24/7 MSSP, including escalation paths, service quality, vendor performance and cost, and handoffs to the internal team.
Own the detection strategy and health of the SIEM environment, including developing custom detections, tuning alerts, expanding log-source coverage, and scaling the platform.
Modernize Security Operations using AI and automation to streamline alert triage, enrichment, investigation and response, reduce manual work, and scale team impact.
Build and maintain incident-response documentation, including playbooks, runbooks and training materials.
Maintain the post-incident process and ensure action items are owned, tracked and closed, including immediate fixes and longer-term improvements.
Identify recurring root causes from incident trends and partner with Engineering, Infrastructure, Security and Product teams to prioritize and deliver preventive fixes.
Define and track SecOps metrics and KPIs, and present a holistic monthly view of the function to senior leadership.
Promote security awareness through tabletop exercises, training sessions and talks.
Participate in a global on-call rotation and respond to critical security events outside standard working hours.