Security & Threat Operations Manager

🕒 Outubro 29

🏄 California, Colorado, +5 estados a mais – Remoto

🏄 California – Remote ⛰️ Colorado – Remote 🐊 Florida – Remote 🌽 Illinois – Remote 🗽 New York – Remote 🤠 Texas – Remote ☕ Washington – Remote

💵 $200.000 - $250.000 / ano

⏰ Tempo Integral

🟠 Sênior

🔴 Especialista

⚙️ Operações

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

DriveWealth

SiteLinkedInTodas as Vagas

201 - 500 funcionários

Fundada em 2012

💳 Fintech

🔌 API

💸 Finanças

💰 $15.000.000 Private Equity Round em 2022-12

Fintech • API • Finance

A DriveWealth é uma empresa fintech pioneira que oferece uma plataforma Corretora-como-um-Serviço baseada em API. Eles fornecem uma gama de serviços financeiros para parceiros B2B, permitindo que clientes em todo o mundo negociem e invistam utilizando sua plataforma. A tecnologia da DriveWealth suporta negociações de valores mobiliários, incluindo investimento em ações fracionadas e negociações baseadas em dólar, tornando-a acessível a um vasto público. Sua plataforma é utilizada por bancos, corretores, gestores de ativos, carteiras digitais e marcas de consumo para oferecer uma variedade de oportunidades de investimento, incluindo ações dos EUA, ETFs, fundos mútuos e opções. A DriveWealth é líder no espaço fintech, promovendo inclusão financeira e inovação.

Descrição

• Mature Security & Threat Operations through a measurable roadmap, operating model, monitoring coverage, escalation procedures, and service provider oversight • Grow and lead the team through hiring, coaching, training, career development, and performance management • Own the detection program, including threat intelligence, content development, proactive hunting, attack simulations, and purple-team exercises • Own security monitoring and investigation across product and corporate environments • Own digital risk monitoring for external attack surfaces, leaked credentials, exposed data, impersonation, phishing domains, and takedown coordination • Partner with Security Engineering to build automated security response actions • Coordinate required non-automated response actions with business leaders • Own the incident response lifecycle as Incident Commander, including preparedness, forensic evidence handling, containment, recovery validation, regulatory coordination, and post-incident improvement • Own the exposure management lifecycle from discovery through verified closure • Coordinate remediation with accountable system and product owners • Operate and tune DLP, WAF, email filtering, and identity compromise prevention controls • Partner with Legal, Compliance, Security Engineering, and GRC to implement SEC and FINRA requirements, including SEC Rules 17a-3 and 17a-4 controls • Automate control validation and evidence collection • Support audits and regulatory examinations and drive remediation of technical findings • Report to the Chief Information Security Officer • Coordinate response across technical and business teams and partner with Security Engineering, DevOps & Platform, and Product & Engineering

🎯 Requisitos

• 10+ years in security operations, detection engineering, incident response, or related disciplines • 3+ years managing technical teams • Experience building or maturing an operations function • Experience serving as Incident Commander during significant security incidents • Hands-on expertise in threat intelligence, detection content development, SIEM and endpoint analytics, investigation, threat hunting, and defensive validation • Practical scripting or query skills in Python, SQL, or comparable languages • Working knowledge of AWS, Kubernetes, API security, identity, and Windows/macOS endpoint telemetry • Experience supporting production environments with demanding availability and latency requirements is preferred • Experience creating, operating, and tuning DLP, WAF, and email filtering controls • Experience investigating insider threats and digital risks, including exposed credentials, impersonation, and phishing domains • Strong people leadership, process design, and prioritization skills • Ability to influence Engineering and IT and support on-call escalation and incident response outside normal business hours • Familiarity with NIST CSF, incident response practices, and MITRE ATT&CK • Experience in regulated financial services, including SEC/FINRA environments and applicable incident, data protection, and recordkeeping obligations, is preferred • Bachelor’s degree in a related field or equivalent practical experience • Applicants must be authorized to work for any employer in the United States • Applicants must be currently authorized to work in the United States without current or future visa sponsorship

🏖️ Benefícios

• Competitive compensation • Equity • 401(k) match • Medical insurance • Dental insurance • Vision insurance • Disability insurance • Paid Parental Leave • Wellness reimbursement • Company-provided phone • Personal development allowance • Generous Paid Time Off (PTO) • Observed holidays • Bonus • Heavily subsidized benefits and perks

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo