Security & Threat Operations Manager

🔥 0 minutes ago

🏄 California, Colorado, +5 more states – Remote

🏄 California – Remote ⛰️ Colorado – Remote 🐊 Florida – Remote 🌽 Illinois – Remote 🗽 New York – Remote 🤠 Texas – Remote ☕ Washington – Remote

💵 $200k - $250k / year

⏰ Full Time

🟠 Senior

🔴 Lead

⚙️ Operations

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

DriveWealth

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2012

💳 Fintech

🔌 API

💸 Finance

💰 $15M Private Equity Round on 2022-12

Fintech • API • Finance

DriveWealth is a pioneering fintech company that provides an API-based Brokerage-as-a-Service platform. They offer a range of financial services to B2B partners, enabling clients globally to trade and invest using their platform. DriveWealth's technology supports securities trading, including fractional share investing and dollar-based trading, making it accessible to a wide audience. Their platform is used by banks, broker dealers, asset managers, digital wallets, and consumer brands to offer a variety of investment opportunities, including US equities, ETFs, mutual funds, and options. DriveWealth is a leader in the fintech space, promoting financial inclusivity and innovation.

📋 Description

• Mature Security & Threat Operations through a measurable roadmap, operating model, monitoring coverage, escalation procedures, and service provider oversight • Grow and lead the team through hiring, coaching, training, career development, and performance management • Own the detection program, including threat intelligence, content development, proactive hunting, attack simulations, and purple-team exercises • Own security monitoring and investigation across product and corporate environments • Own digital risk monitoring for external attack surfaces, leaked credentials, exposed data, impersonation, phishing domains, and takedown coordination • Partner with Security Engineering to build automated security response actions • Coordinate required non-automated response actions with business leaders • Own the incident response lifecycle as Incident Commander, including preparedness, forensic evidence handling, containment, recovery validation, regulatory coordination, and post-incident improvement • Own the exposure management lifecycle from discovery through verified closure • Coordinate remediation with accountable system and product owners • Operate and tune DLP, WAF, email filtering, and identity compromise prevention controls • Partner with Legal, Compliance, Security Engineering, and GRC to implement SEC and FINRA requirements, including SEC Rules 17a-3 and 17a-4 controls • Automate control validation and evidence collection • Support audits and regulatory examinations and drive remediation of technical findings • Report to the Chief Information Security Officer • Coordinate response across technical and business teams and partner with Security Engineering, DevOps & Platform, and Product & Engineering

🎯 Requirements

• 10+ years in security operations, detection engineering, incident response, or related disciplines • 3+ years managing technical teams • Experience building or maturing an operations function • Experience serving as Incident Commander during significant security incidents • Hands-on expertise in threat intelligence, detection content development, SIEM and endpoint analytics, investigation, threat hunting, and defensive validation • Practical scripting or query skills in Python, SQL, or comparable languages • Working knowledge of AWS, Kubernetes, API security, identity, and Windows/macOS endpoint telemetry • Experience supporting production environments with demanding availability and latency requirements is preferred • Experience creating, operating, and tuning DLP, WAF, and email filtering controls • Experience investigating insider threats and digital risks, including exposed credentials, impersonation, and phishing domains • Strong people leadership, process design, and prioritization skills • Ability to influence Engineering and IT and support on-call escalation and incident response outside normal business hours • Familiarity with NIST CSF, incident response practices, and MITRE ATT&CK • Experience in regulated financial services, including SEC/FINRA environments and applicable incident, data protection, and recordkeeping obligations, is preferred • Bachelor’s degree in a related field or equivalent practical experience • Applicants must be authorized to work for any employer in the United States • Applicants must be currently authorized to work in the United States without current or future visa sponsorship

🏖️ Benefits

• Competitive compensation • Equity • 401(k) match • Medical insurance • Dental insurance • Vision insurance • Disability insurance • Paid Parental Leave • Wellness reimbursement • Company-provided phone • Personal development allowance • Generous Paid Time Off (PTO) • Observed holidays • Bonus • Heavily subsidized benefits and perks

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume