Senior Manager, Security Operations

Responsibilities

• Lead MNTN's security operations program, including threat detection and response, vulnerability management, identity security, endpoint protection, and cloud security.
• Develop and execute the security strategy, roadmap, and operational processes that balance business agility with effective risk management.
• Own security monitoring, incident response, investigations, and post-incident reviews, driving continuous improvement across the organization.
• Partner with Engineering and Infrastructure teams to embed security best practices across cloud environments, infrastructure, and software development.
• Lead compliance initiatives and support customer security requirements, including SOC 2 and other regulatory or industry frameworks.
• Build and mature MNTN's security program by aligning policies, controls, and processes with industry standards such as NIST.
• Manage and mentor the security team while overseeing security vendors, tooling, and budget.
• Communicate security risks, priorities, and program progress to executive leadership and cross-functional stakeholders.

Success Criteria

• Security incidents are detected, contained, and resolved quickly through mature monitoring, response, and operational playbooks.
• Security is embedded across infrastructure, engineering, and business processes without slowing innovation.
• The organization has clear visibility into security risks, measurable improvements, and a scalable roadmap for future growth.

Requirements

• 8+ years of experience in cybersecurity, information security, or security operations, including leadership experience managing security teams.
• Experience building and operating modern security programs in cloud-first environments, preferably AWS.
• Strong knowledge of identity and access management, endpoint security, SIEM, EDR, vulnerability management, incident response, and cloud security best practices.
• Experience supporting compliance programs such as SOC 2, SOX, or similar security frameworks.
• Proven ability to communicate technical risks and security strategy to both technical and non-technical stakeholders.
• Experience partnering with Engineering, IT, Legal, Privacy, and executive leadership to drive cross-functional security initiatives.
• Strong leadership, collaboration, and operational excellence with a continuous improvement mindset.

Nice-to-Haves

• Experience with DevSecOps, infrastructure-as-code, security automation, or AI security.
• Security certifications such as CISSP, CISM, GIAC, or equivalent.
• Experience in SaaS, AdTech, MarTech, or other cloud-native technology companies.