Security Operations Manager

📋 Description

• Own incident response end-to-end (preparation, triage, containment, eradication, post-incident
• Lead major incidents personally and set the standard for incident response
• Evolve the SOC operating model, on-call structure, tooling, and automation
• Treat detection engineering as an engineering discipline (detections as code, versioned, tested
• Build threat intelligence capability that informs hunts, detections, and leadership briefings
• Be the voice of operational reality at the leadership table; collaborate with engineering and

🎯 Requirements

• Deep, current incident response experience, personally leading serious incidents
• Experience building or rebuilding a SOC (operating model, hiring, tooling, metrics)
• Technical grounding in cloud environments (AWS, GCP, Azure), including identity, logging, lateral
• Detection engineering experience (rule development, coverage mapping, tuning, automation)
• Threat intelligence experience – built or run an intel function and made it operational
• Track record of leading globally distributed technical teams across time zones

🎁 Benefits

• Collaborative environment with colleagues from all over the world (offices in Europe, Asia, North
• Impactful work: contribute to groundbreaking products influencing industries globally
• Ability to shape your own workday and career via a clearly defined professional and personal
• Diverse and collaborative global team with a unique spirit
• Opportunity to work with senior leadership and build your career in an inspiring, fast-growing
• Flexible working model