# Manager, Security Operations

**Company:** [Rula](https://hotfix.jobs/companies/rula)
**Location:** Remote
**Role:** Security Engineering
**Salary:** $194k – $217k/yr
**Experience:** 5+ years
**Skills:** SIEM, Soar, Incident Response, Detection Engineering, Cloud Security, Threat Hunting, Mitre Att&Ck, SQL, Python, Security Automation
**Posted:** 2026-06-12

> Lead and manage a security operations team responsible for detection, incident response, and security automation while coaching engineers and managing vendor relationships. Requires 5+ years in security operations and 2+ years of people management experience.

## Job Description

## Responsibilities
- Lead the team responsible for detecting, investigating, responding to, and learning from security events
- Manage and coach a team of security engineers while remaining hands-on with detection design, alert tuning, incident response, runbooks, operations, and security automation
- Manage relationships with security operations vendors
- Work closely with Security, Engineering, IT, Compliance, Privacy, and external partners to improve protection of patient and provider data

## Requirements
- 5+ years of professional experience in security operations, detection engineering, incident response, threat hunting, cloud security, or a related security engineering role
- 2+ years of direct people management experience for security engineers, incident responders, analysts, or a security operations / detection and response team
- Hands-on proficiency building, tuning, and operating detections in a modern SIEM and managing a SOAR tool (or comparable security operations solutions)
- Demonstrated expertise leading or materially contributing to incident response, including triage, containment, stakeholder communication, and post-incident improvements
- Working knowledge of cloud service provider and SaaS security telemetry, identity logs, endpoint security signals, and common attacker behaviors

## Nice-to-Haves
- Experience in healthcare or another regulated environment where incident response, privacy, and compliance requirements intersect
- Experience owning an MDR provider relationship, defining escalation quality expectations, running vendor reviews, and improving vendor-to-internal handoff workflows
- Experience applying MITRE ATT&CK, threat hunting methods, or detection engineering frameworks to prioritize coverage gaps
- Proficiency querying and analyzing security data using SQL, Python, or similar tools; familiarity with security data lakes, OCSF, Athena, Trino, Panther, or comparable platforms
- Experience building or improving security on-call, shared escalation models, incident command, tabletop exercises, or post-incident review practices
- Relevant security certifications such as OSCP, GCIH, GCIA, GCFA, or GSOC

## Benefits
- 100% remote work environment (must be based in United States, currently not hiring in Hawaii)
- Comprehensive health benefits: Medical, dental, vision, life, disability, and FSA/HSA
- 401(k) plan access
- Generous time-off policies including 2 company-wide shutdown weeks each year
- Paid parental leave
- Employee Assistance Program (EAP)
- Quarterly department stipend
- Home office stipend & $50 monthly stipend for internet or cell phone expenses
- $50/month wellness stipend

## Similar roles

- [Security Engineer IC](https://hotfix.jobs/jobs/37c3d1d2-9cf9-4d84-bb6a-076cf74b32fe) - Stripe - Remote - $194k – $268k/yr
- [Protection Scientist Engineer, Intelligence and Investigations](https://hotfix.jobs/jobs/32daff80-45cb-4724-b0ca-201253f2d967) - OpenAI - San Francisco, CA - $198k – $425k/yr
- [Enterprise Security Engineer](https://hotfix.jobs/jobs/c5a8b575-ef52-45c3-ab89-7b19a3a5bb5c) - Benchling - San Francisco, CA - $189k – $256k/yr
- [Detection & Response Security Engineer](https://hotfix.jobs/jobs/d9b874cd-5256-437a-b42b-cacd3aceaaa4) - Harvey - San Francisco, CA - $188k – $282k/yr
- [Security Engineer](https://hotfix.jobs/jobs/9731ca0c-3722-4ec9-9644-4515044e6890) - Nooks - San Francisco, CA - $200k – $315k/yr

**Apply:** https://hotfix.jobs/jobs/200f94c8-0a36-4042-b17d-4ca1769be31f
**Canonical:** https://hotfix.jobs/jobs/200f94c8-0a36-4042-b17d-4ca1769be31f