Director of Threat Management and Operations

• Build and lead threat and vulnerability, logging/monitoring/alerting, incident response, and automated remediation programs
• Create and facilitate table top exercises
• Keep our incident response plan and playbooks current
• Be a technical subject matter expert and key decision-maker in project meetings and activities
• Contribute to roadmaps and overviews to key stakeholders and internal customers such as engineering, data, and product teams
• Help maintain internal documentation and business processes around our security operations and services catalog
• Help define requirements and success criteria to explore and evaluate multiple solutions or vendors to address our needs in the Threat Management and Incident Response domains
• Closely collaborate with other functions, including but not limited to Engineering, IT, Physical Security, HR, Legal. etc
• Help the GRC staff conduct third-party risk assessments and internal audits
• Build a team of 24/7 incident responders, utilizing the follow-the-sun model

• Prior experience building and leading IR, Detection and Response, and/or Security Operations teams
• Prior experience with defining OKR and KPI metrics to track progress or success and providing regular updates
• Experience with GCP cloud environment, including its services
• At least 10 years or more of relevant security engineering experience
• Excellent written and verbal communication skills, and experience working on remote teams
• Working knowledge of containers and Kubernetes environments
• Experience in cloud-native, SaaS technology industries and tech stack
  

New York City residents only: Minimum salary of $222,000/year + equity and benefits
*Note: Disclosure as required by NYC Pay Transparency Law.
Colorado residents only: Minimum salary of $177,600/year + equity and benefits
*Note: Disclosure as required by sb19-085(8-5-20).