Senior Product Manager, Security Operations (SecOps)

Who are we?Equinix is the world’s digital infrastructure company, shortening the path to connectivity to enable the innovations that enrich our work, life and planet. A place where bold ideas are welcomed, human connection is valued, and everyone has the opportunity to shape their future.A career at Equinix means being at the center of shaping what comes next and amplifying customer value through innovation and impact. You’ll work across teams, influence key decisions, and help shape the path forward. You’ll find belonging, purpose, and a team that welcomes you—because when you feel valued, you’re empowered to do your best work.Job SummaryWe are looking for a Product Manager, SecOps to lead the strategy, roadmap, and adoption of security capabilities embedded directly into our engineering ecosystem. This is not a policy-writing or governance role. It is a product role focused on making security scalable, automated, developer-friendly, and measurable.Security Operations depends on tight coordination between the teams that build and manage security capabilities and the teams that use those capabilities to detect and respond to threats. This Product Manager role creates a single product owner for that boundary, ensuring detections, automation, telemetry onboarding, and platform changes are production-ready, governed, measurable, and adopted by analysts and responders. ResponsibilitiesRole ownership End-to-end detection lifecycle: Drive the process from threat-informed idea generation through rule development, testing, deployment, tuning, analyst adoption, and retirement. SecOps backlog prioritization: Maintain and prioritize a shared roadmap across telemetry onboarding, detection content, SOAR playbooks, analyst workflows, and platform enhancements. Operational readiness: Ensure new capabilities launch with runbooks, ownership, success criteria, training, support processes, documentation, and release criteria. Cross-team process improvement: Identify and reduce friction in handoffs between engineering and operations, resolving delivery blockers and unclear ownership. Platform value realization: Translate security platform capabilities into measurable outcomes, including improved alert quality, faster response, broader telemetry coverage, and higher automation effectiveness. Stakeholder alignment: Create clear decision-making forums and communication rhythms across security engineering, monitoring and response, incident management, and threat intelligence. Key areas of focus Detection and rule lifecycle: Own the product process for how detections move from concept to value, including intake, prioritization, test standards, analyst validation, tuning, coverage review, readiness criteria, handoff quality, false-positive trends, alert fidelity, and lifecycle decisions. Telemetry and log onboarding strategy: Prioritize log sources, parser improvements, and schema normalization based on risk, coverage gaps, investigative value, analyst needs, concrete use cases, dependencies, sequencing, and effort tradeoffs. SOAR and automation governance: Scale automation safely by improving how ideas are submitted, reviewed, built, tested, approved, and adopted; clarify ownership, controls, approvals, adoption measures, success rates, analyst time savings, and failure patterns. Platform roadmap and feature adoption: Partner with technical leaders to shape adoption of SIEM, SOAR, and AI-assisted operational capabilities, including rollout plans, operational testing, enablement, success metrics, detection-as-code, composite detections, and standardized content management. Metrics, reporting, and operating cadence: Define KPIs, health dashboards, and recurring reviews for detection quality, onboarding throughput, automation effectiveness, operational readiness, roadmap priorities, launch readiness, and post-launch performance. What you'll do Own and maintain the SecOps product roadmap across shared engineering and operations priorities. Partner with leaders in detection engineering, monitoring and response, incident management, and threat intelligence to define quarterly objectives. Facilitate prioritization decisions for detections, log sources, automations, integrations, and workflow improvements. Define launch criteria for new security content and capabilities, including documentation, training, support model, and success measures. Run structured intake and triage for stakeholder requests and convert them into a clear, ranked backlog. Lead cross-functional reviews to resolve delivery blockers, unclear ownership, and handoff gaps. Develop metrics that show whether new capabilities are improving response speed, alert quality, coverage, and analyst efficiency. Document requirements, business value, user workflows, acceptance criteria, and rollout plans. Represent operational needs in platform discussions and represent engineering realities in operational planning. Drive continuous improvement based on analyst feedback, incident learnings, and evolving threat priorities. QualificationsMust-have qualifications Experience as a Product Manager owning cross-functional delivery in a complex technical environment. Strong understanding of Security Operations concepts, including SIEM, detection engineering, incident response, case management, and security automation. Experience prioritizing roadmaps and backlogs across multiple stakeholder groups with competing demands. Ability to translate technical platform work into clear user value, measurable outcomes, and release criteria. Strong written and verbal communication skills, including the ability to work effectively with engineers, analysts, managers, and executives. Experience building processes, KPIs, and operating cadences in environments where teams depend on one another for outcomes. Comfort working with ambiguity and turning loosely defined needs into clear plans and decisions.​Preferred qualifications Experience supporting or partnering closely with Security Operations Center, incident response, or threat detection teams. Familiarity with security telemetry pipelines, data normalization, and log onboarding workflows. Experience with SIEM and SOAR platforms such as Google SecOps, Chronicle, Splunk, Microsoft Sentinel, Palo Alto XSIAM, or similar technologies. Exposure to detection engineering practices such as rule testing, content lifecycle management, and detection-as-code. Understanding of response automation design, control frameworks, and approval models for high-impact actions. Experience using data to evaluate false positives, alert quality, operational throughput, and workflow adoption. Knowledge of common security frameworks and operating models such as NIST incident response guidance. The targeted pay range for this position in the following location is / locations are:United States - Dallas Infomart Office DAI : 136,000 - 204,000 USD / AnnualCanada - Toronto Office TRO : 131,000 - 181,000 CAD / AnnualOur pay ranges reflect the minimum and maximum target for new hire pay for the full-time position determined by role, level, and location.The pay range shown is based on our compensation structure in place at the time of posting and may be updated periodically based on business needs. Individual pay is based on additional factors including job-related skills, experience, and relevant education and/or training.The targeted pay range listed reflects the base pay only and does not include bonus, equity, or benefits. Employees are eligible for bonus, and equity may be offered depending on the position.Equinix BenefitsAs an employee, you become important to Equinix’s success. We ensure all your benefits are in line with our core values: competitive, inclusive, sustainable, connected and efficient. We keep them competitive within the current marketplace to ensure we’re providing you with the best package possible. So, wherever you are in your career and life, you’ll be able to enhance your experience and bring your whole self to work.Employee Assistance Program: An Employee Assistance program is available to all employees. US Benefits: - Insurance: You may enroll in health, life, disability and voluntary plans that are designed for you and your eligible family members. - Retirement: You and Equinix may contribute to a retirement plan to help you plan for your financial future. - Paid Time Off (PTO) and Paid Holidays: You will receive an accrued amount of PTO each pay period along with various paid holidays for you to rest and recharge. Eligibility requirements apply to some benefits. Benefits are subject to change and may be subject to specific plan or program terms. Canada Core Benefits: - Insurance: You may enroll in healthcare coverage that is designed to complement the provincial healthcare system, along with life, disability and optional benefit plans that are designed for you and your eligible family members. - Retirement: You may also enroll in Equinix-sponsored retirement or savings plans: Defined Contribution Pension Plan (DCPP), Group Retirement Savings Plan (RRSP) and Tax-Free Savings Plan (TSFA). - Vacation and Paid Holidays: Equinix offers both vacation and personal time, along with various paid holidays for you to rest and recharge. Eligibility requirements apply to some benefits. Benefits are subject to specific plan or program terms, and to change at Equinix discretion. Equinix is committed to ensuring that our employment process is open to all individuals, including those with a disability. If you are a qualified candidate and need assistance or an accommodation, please let us know by completing this form. Equinix is an Equal Employment Opportunity and, in the U.S., an Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to unlawful consideration of race, color, religion, creed, national or ethnic origin, ancestry, place of birth, citizenship, sex, pregnancy / childbirth or related medical conditions, sexual orientation, gender identity or expression, marital or domestic partnership status, age, veteran or military status, physical or mental disability, medical condition, genetic information, political / organizational affiliation, status as a victim or family member of a victim of crime or abuse, or any other status protected by applicable law. We use artificial intelligence in our hiring process. Learn more here. This posting is a new position within our organization. SummaryLocation: Dallas Infomart Office DAI; TorontoType: Full time