Cyber Security Manager

As a Ping Cyber Security Manager , you will be responsible for running the day-to-day operational delivery of the Cyber Security Engineering team . You will help ensure the team has the capacity, structure, processes, and capabilities needed to protect our enterprise systems, including our Software-as-a-Service (SaaS) business areas. This role will take ownership of operational coordination, team execution, incident readiness, prioritisation, on-call operations, and continuous improvement across CSE .

You will provide direction across incident response, security automation, detection engineering, secure configuration, and operational security improvements. This role requires a strong technical background , proven Incident Response experience , sound operational judgement, and the ability to turn security priorities into sustainable ways of working for the team.

This role would be well suited to an experienced security leader with a background in Security Operations , Security Engineering , Incident Response , or Site Reliability Engineering who is looking to manage and mature a high-performing cyber security engineering function.

You will:

• Run and coordinate the day-to-day operational activities of the Cyber Security Engineering team
• Build operational capacity across the team by improving planning, prioritisation, delegation, and delivery practices
• Develop and mature team capabilities across incident response, detection engineering, automation, and security operations
• Lead, coach, and support members of the Cyber Security Engineering team
• Run and mature incident response processes, including the design, development, and implementation of incident response playbooks
• Support incident response coordination across multi-disciplinary teams
• Provide technical and operational leadership in the assessment of system design, change, and operational risk
• Participate in and improve the team’s weekly on-call rotation, including escalation, response quality, handover, and operational readiness
• Lead the design, development, and implementation of engineered security solutions that are reliable, maintainable, and scalable
• Guide and support detection engineering activities across enterprise and SaaS environments
• Identify operational gaps, risks, and areas of the business that require security improvement, then translate them into clear, workable solutions
• Influence and align the team’s operational priorities with the wider CSE vision, roadmap, and strategy
• Collaborate cross-functionally to support delivery of roadmap items, projects, and security improvements
• Partner with engineering, infrastructure, product, and operations teams to improve security outcomes across Ping

Requirements

• Experience leading or managing day-to-day security operations , security engineering , incident response , or technical operations teams
• Strong background in operational delivery, including prioritisation, planning, delegation, and continuous improvement
• Experience building team capacity, improving operational processes, and developing technical capabilities within a security function
• Required Incident Response experience , including coordination of complex incidents involving multiple teams
• Experience with automation within Security Orchestration and Automation tooling, as well as bespoke scripting automation
• Experience with Security Information and Event Management (SIEM) systems, ideally Google Chronicle and YARA-L
• Strong understanding of cloud environments, preferably AWS and GCP
• Experience working with container technologies, notably Kubernetes and Docker , in development and incident response contexts
• Experience deploying, operating, or utilising Endpoint Detection and Response (EDR) tools
• Experience leading cross-functional projects and influencing teams outside of direct reporting lines
• Ability to communicate operational priorities, technical risk, and delivery trade-offs clearly to technical and non-technical audiences
• Strong judgement, ownership, and decision-making during security incidents and operational escalations
• Participation in the team’s on-call rotation is required for this position

You have an advantage if:

• You have experience building or leading a Security Operations Centre (SOC) , Cyber Security Engineering , Detection Engineering , or technical operations function
• You have experience defining operating models, team roadmaps, operational maturity plans, or capability development plans
• You have experience utilising and integrating threat intelligence into security systems