Sr. Security Operations Manager

Addepar is a global data and AI platform empowering investment professionals to turn complex financial information into actionable intelligence. We are currently seeking a Sr. Manager, Security Operations to lead our Global Security Operations team within Addepar's Information Security & Risk organization. In this role, you will own the day-to-day running of our detection and response function, act as incident commander for security incidents, and partner with our 24/7 MSSP to ensure threats are identified and handled quickly. You will set the operational objectives and strategy for Security Operations, lead and grow a global team, and shape our detection strategy for threats specific to Addepar's environment. The successful candidate is a hands-on leader who brings structure, calm and accountability to high-pressure situations.

Responsibilities

Lead the day-to-day operations of Addepar's Global Security Operations team, and serve as incident commander for major security incidents; Manage and develop a globally distributed team, provide mentorship and training, set the team's roadmap and OKRs, and manage on-call coverage across time zones; Own the relationship with the 24/7 Managed Security Services Provider (MSSP), including escalation paths, service quality, vendor performance and cost, and handoffs to the internal team; Own the detection strategy and health of the SIEM environment, including building custom detections, tuning alerts, expanding log source coverage, and ensuring the platform scales; Lead the modernization of SecOps through AIOps, using AI and automation to streamline alert triage, enrichment, investigation and response; Build and own incident response documentation, including playbooks, runbooks and training materials; Maintain the post-incident process so action items are owned, tracked and closed across teams; Use incident trends to identify recurring root causes and partner with Engineering, Infrastructure, Security and Product teams to deliver preventive fixes; Define and track key SecOps metrics and KPIs, and present a monthly view of the Security Operations function to senior leadership; Champion security awareness through tabletop exercises, training sessions and talks; Participate in a global on-call rotation, including responding to critical security events outside standard working hours

Requirements

8+ years of experience in security operations, detection engineering, or incident response; 3+ years of people management experience, with a track record of mentoring and developing security teams; Proven experience as an incident commander for security incidents, including leading the response, coordinating multiple workstreams, running postmortems and driving action items to completion; Hands-on experience with Amazon Web Services (AWS), including investigating and responding to security events in the cloud; Bachelor's degree in Computer Science, Cyber Security, or a related field, or equivalent experience; Ability to communicate clearly with technical and non-technical audiences, including senior leadership, and influence peers and leaders in sensitive situations; Ability to bring structure to ambiguous, fast-moving situations and stay composed under pressure; Ability to work core business hours in Eastern Time (9:00 AM – 5:00 PM ET) if working remotely; Must be legally authorized to work in the United States without requiring current or future visa sponsorship, and authorized to begin work on the first day of employment

Benefits

Bonus; Equity; Benefits