Technical Manager, Information Security

Atomic Machines•Santa Clara, CA

2d•$240,000 - $280,000•Onsite

About The Position

Atomic Machines is hiring a hands-on technical leader within its IT team to manage the lifecycle of enterprise cybersecurity tools, technologies, and detection capabilities across a complex high-tech manufacturing environment. The role bridges strategic security direction with technical execution, managing external engineers and security vendors to provide protection across cloud, OT/ICS, endpoint, identity, and network domains. The position owns the detection and response program at a management level, drives AWS security practices, sets direction for SIEM and cloud-native security platforms, and embeds security into cloud design, IAM strategy, and network architecture. It is a key escalation point for complex incidents and contributes to security policy, standards, and vendor partnerships. The role is based full-time in either the Emeryville or Santa Clara office, with occasional work from the other office as needed. It includes on-call rotation and escalation protocols to ensure 24/7 network operational coverage. The compensation includes equity and benefits, with a stated salary range of $240,000–$280,000 USD.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related technical field; an equivalent combination of education and experience is considered.
At least 8 years of progressive cybersecurity engineering experience.
At least 2–3 years in a technical lead or people-management capacity.
Demonstrated experience managing internal security engineers and external vendors or MSSPs, with accountability for security outcomes and SLA adherence.
Hands-on expertise with enterprise SIEM platforms such as Splunk, Sentinel, Chronicle, or equivalent, including detection-rule authoring, data onboarding, and operational tuning.
Deep working knowledge of AWS security services, including Security Hub, GuardDuty, CloudTrail, Config, IAM, Macie, Inspector, VPC security architecture, and SCPs.
Experience developing security automation using SOAR platforms such as Palo Alto XSOAR, Splunk SOAR, Tines, or equivalent, and scripting with Python or PowerShell.

Nice To Haves

Experience conducting OT/ICS cybersecurity assessments in manufacturing, industrial, or critical-infrastructure environments is strongly preferred.
Familiarity with threat-modeling frameworks such as MITRE ATT&CK and STRIDE and their application to cloud and OT environments.
Relevant certifications such as CISSP, CISM, AWS certifications, CompTIA Security+, GIAC, GCIA, GCIH, Palo Alto PCNSE, or Splunk Certified Architect.
Technical familiarity with Splunk ES, Microsoft Sentinel, Rapid7, Palo Alto security tools, Cisco ISE or Aruba ClearPass NAC, Okta, Azure AD/Entra ID, CyberArk or BeyondTrust PAM, and Dragos, Claroty, or Nozomi OT visibility tools.
Awareness of the Purdue model, IEC 62443, and NERC CIP.

Responsibilities

Advance the detection and response program across cloud, SaaS, endpoint, and identity domains.
Implement organization-wide automation to reduce alert fatigue and accelerate security response.
Mature SIEM and cloud-native logging architectures, maintaining a functional and cost-aware telemetry pipeline across corporate, manufacturing, and engineering environments.
Define and implement scalable security controls for cloud and infrastructure security through detection, configuration standards, and automated enforcement.
Drive measurable, repeatable, and auditable improvements to cloud and infrastructure security posture.
Ensure 24/7 network operational coverage through on-call rotation and escalation protocols.
Manage the full lifecycle of enterprise security tools, including deployment, configuration, tuning, and decommissioning.
Manage SIEM operations, including data-source onboarding, log normalization, correlation-rule development, and alert tuning.
Develop and enforce network-device hardening standards across managed security platforms.
Lead, mentor, and develop internal technical resources and external security vendors, holding them accountable to SLAs, quality standards, and security outcomes.
Act as the primary escalation point for team members and vendors during incidents, complex technical issues, and project-delivery challenges.
Manage relationships with MSSPs and specialized security vendors, including performance reviews and contract evaluations.
Mentor engineers across teams and promote strong detection engineering, automation, and cloud security practices.
Work with IT leadership, security management, and vendors to develop solutions that meet evolving business and regulatory requirements.
Define and enforce cloud security practices across workloads, accounts, and organizational units, including least-privilege IAM, resource-policy governance, and SCP guardrails.
Lead implementation and ongoing tuning of cloud security services.
Embed security controls into CI/CD pipelines, infrastructure-as-code templates, and cloud landing-zone designs in partnership with cloud infrastructure and platform engineering teams.
Design and maintain cloud network security architecture, including VPC segmentation, security-group standards, PrivateLink, WAF rulesets, and configurations.
Define cloud security configuration standards, including CIS benchmarks and security best practices, and implement automated compliance enforcement.
Govern cloud IAM strategy, including role-based access, MFA requirements, and service control policies.
Participate in designing and enforcing network security policies, including firewall rule management, ZTNA, NAC, and micro-segmentation.
Oversee network vulnerability assessments and penetration-test scoping, ensure timely remediation, and provide risk assessment reports to stakeholders.
Support compliance activities through network-control documentation, audit evidence, and remediation execution.
Establish processes to keep network equipment current and hardened against known vulnerabilities.
Set technical direction for threat detection and response across SIEM, cloud-native security platforms, and adjacent security tools.
Lead threat-model-driven detection strategy, identifying high-risk attack paths and ensuring detection coverage across cloud, SaaS, endpoint, and identity domains.
Lead technical analysis and coordinate response during complex security incidents, including post-incident remediation.
Identify systemic gaps in detection coverage, telemetry ingestion, and automation, and lead cross-team efforts to address them.
Develop and mature playbooks to reduce mean time to detect and mean time to respond.
Analyze network traffic, system logs, and cloud telemetry to identify anomalies, confirm threats, and validate security controls.
Conduct OT cybersecurity assessments, identify risks and potential impacts, and recommend prioritized remediation.
Design and support network segmentation for OT/IT convergence environments, including segmented ICS networks.
Work with engineering and operations teams to assess security posture without disrupting production operations.
Identify and implement appropriate remote and local access controls for manufacturing systems.
Develop and maintain architectural standards, including reference architectures, data-flow diagrams, detection-pipeline operating models, and security design patterns.
Design cybersecurity solutions for network segmentation, remote and local access controls, and advanced intrusion detection and prevention.
Embed security into cloud design, IAM strategy, and network architecture from inception in partnership with IT infrastructure, platform, and engineering teams.
Support project requests to manage and mitigate enterprise vulnerabilities.
Develop, maintain, and communicate security policies, plans, and procedures aligned with applicable regulatory requirements.
Provide technical oversight of network security operations and support audit readiness and evidence collection.
Communicate identified vulnerabilities and architectural weaknesses through stakeholder-ready risk assessments, impact descriptions, and recommended mitigations.