Senior Manager, Security Operations
Lead MNTN's security operations including threat detection, incident response, vulnerability management, and cloud security. Build and mature the security program in a cloud-first SaaS environment while partnering with engineering, leadership, and compliance teams.
About the job
Responsibilities
- Lead MNTN's security operations program, including threat detection and response, vulnerability management, identity security, endpoint protection, and cloud security.
- Develop and execute the security strategy, roadmap, and operational processes that balance business agility with effective risk management.
- Own security monitoring, incident response, investigations, and post-incident reviews, driving continuous improvement across the organization.
- Partner with Engineering and Infrastructure teams to embed security best practices across cloud environments, infrastructure, and software development.
- Lead compliance initiatives and support customer security requirements, including SOC 2 and other regulatory or industry frameworks.
- Build and mature MNTN's security program by aligning policies, controls, and processes with industry standards such as NIST.
- Manage and mentor the security team while overseeing security vendors, tooling, and budget.
- Communicate security risks, priorities, and program progress to executive leadership and cross-functional stakeholders.
Success Criteria
- Security incidents are detected, contained, and resolved quickly through mature monitoring, response, and operational playbooks.
- Security is embedded across infrastructure, engineering, and business processes without slowing innovation.
- The organization has clear visibility into security risks, measurable improvements, and a scalable roadmap for future growth.
Requirements
- 8+ years of experience in cybersecurity, information security, or security operations, including leadership experience managing security teams.
- Experience building and operating modern security programs in cloud-first environments, preferably AWS.
- Strong knowledge of identity and access management, endpoint security, SIEM, EDR, vulnerability management, incident response, and cloud security best practices.
- Experience supporting compliance programs such as SOC 2, SOX, or similar security frameworks.
- Proven ability to communicate technical risks and security strategy to both technical and non-technical stakeholders.
- Experience partnering with Engineering, IT, Legal, Privacy, and executive leadership to drive cross-functional security initiatives.
- Strong leadership, collaboration, and operational excellence with a continuous improvement mindset.
Nice-to-Haves
- Experience with DevSecOps, infrastructure-as-code, security automation, or AI security.
- Security certifications such as CISSP, CISM, GIAC, or equivalent.
- Experience in SaaS, AdTech, MarTech, or other cloud-native technology companies.
Skills
AWS, SIEM, Edr, SOC 2, Sox, Nist, Cissp, Cism, Giac, DevSecOps, Infrastructure As Code, Security Automation
Similar jobs
Security Engineering jobs
Idme
McLean, VA
Leads cloud-native security operations, incident response, threat hunting, and forensic investigations while mentoring SOC analysts and improving detection processes. Requires 8+ years in information security, including hands-on cloud incident response and experience with Kubernetes, CI/CD, and advanced security tools.
ConductorOne
San Francisco, CASenior Security Engineer responsible for application, cloud, and platform security, with a focus on automating security workflows, threat modeling, secure development, and remediation. Requires hands-on SaaS security, cloud infrastructure, code review, and agent or automation experience.
Mercor
San Francisco, CA
Leads the company’s security GRC function, owning SOC 2, ISO 27001, enterprise audits, third-party risk, policy governance, and automated evidence workflows. Requires 7+ years of GRC or audit experience, end-to-end SOC 2 and ISO 27001 ownership, and strong security tooling expertise.
Anthropic
San Francisco, CALeads technical SOX controls assurance for financially significant systems, translating audit requirements into engineering acceptance criteria and continuous monitoring. Requires ITGC and SOX 404 expertise, strong engineering fluency, programming ability, and cross-functional collaboration with Finance, Engineering, and auditors.
Discord
United States
Senior platform security engineer responsible for building identity and access management systems, Zero Trust architecture, cloud security baselines, and secure developer platforms. Requires 5+ years operating production systems and strong software development and security experience.