Security Operations Manager [Remote]

This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Security Operations Manager in United States.

This Security Operations Manager role is a high-impact leadership position focused on transforming and scaling enterprise security operations within a modern, cloud-first environment. You will own the end-to-end execution of SecOps capabilities, driving the evolution from reactive alert handling to automated, metrics-driven security response. The role centers on building and optimizing Security Incident Response workflows using ServiceNow SIR as the operational backbone. You will lead a blended global team model that includes internal analysts, managed service providers, and nearshore/offshore resources. Working closely with engineering and security stakeholders, you will enhance detection quality, response automation, and operational maturity across EDR and SIEM platforms. This is a builder-style leadership opportunity where you will directly influence security resilience, process efficiency, and enterprise-wide incident response performance. Your success will be measured through tangible improvements in MTTx metrics and scalable automation outcomes.

Accountabilities:

Own and continuously improve the enterprise Security Operations program, ensuring effective incident response, detection, and remediation across the organization.

• Lead a blended SecOps model across internal teams, MSPs, and offshore/nearshore resources, defining clear operating models and escalation paths.
• Serve as the primary owner of ServiceNow Security Incident Response (SIR), including workflows, data models, and operational procedures.
• Design and optimize SIR playbooks to automate triage, enrichment, containment, and response actions.
• Drive automation initiatives to reduce manual effort and improve MTTD, MTTR, and MTTC metrics.
• Oversee EDR and SIEM integrations, ensuring high-quality detection signals and effective routing into SIR workflows.
• Operate within Microsoft Azure security environments, including tools within Microsoft E5 such as Defender and Sentinel.
• Lead post-incident reviews and ensure continuous improvement of detections, processes, and response strategies.
• Manage, coach, and develop security operations personnel while fostering a high-performance, accountable team culture.
• Act as escalation point for major incidents and communicate operational risk clearly to leadership.

Requirements:
5+ years of experience in Security Operations, SOC, or Incident Response roles with strong hands-on operational expertise.

• 2+ years of experience managing ServiceNow Security Incident Response (SIR), including workflow ownership and playbook development.
• Proven experience designing automation and orchestration workflows within SIR or similar SOAR platforms.
• Strong background in EDR and SIEM operations, including tools such as Microsoft Defender, CrowdStrike Falcon, or equivalent solutions.
• Hands-on experience with Microsoft Azure security services, including Microsoft E5 security capabilities.
• Demonstrated ability to track and improve MTTx metrics (MTTD, MTTR, MTTC) through process and automation improvements.
• Experience leading distributed security operations teams, including vendors and managed service providers.
• Strong incident leadership, communication, and stakeholder management skills in high-pressure environments.
• Strategic and builder mindset with the ability to modernize security operations through automation and process redesign.

Benefits:

• Competitive salary range of approximately $150,000–$180,000 annually, based on experience
• Comprehensive medical, dental, vision, and life insurance coverage
• Generous 401(k) retirement plan with company match
• Unlimited flexible time off (DTO) and paid sick leave in compliance with regulations
• Remote work flexibility aligned with PST business hours
• Wellness programs including virtual fitness, yoga, and meditation sessions
• Employee recognition programs, celebrations, and team-building events
• Career growth opportunities in a rapidly scaling, innovation-driven organization
• Additional reimbursements and discretionary bonuses where applicable

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.