Security Operations Team Lead
Core
Lead and build the security operations function, owning incident response, vulnerability management, system hardening, and resiliency planning for a SaaS platform serving 25,000+ enterprise customers.
Role type
Senior IC Security Operations Team Lead (People Leadership)
Builds
Security operations programs, incident response capabilities, and automated detection workflows
Domain
Cybersecurity / Cloud Security / Enterprise Security (via careerplan.io/jobs/4b33612c-00de-45ca-9bea-9c8fa9a13c2d-security-operations-team-lead-at-safe)
Required skills
Incident response leadership, SIEM tuning and investigation, EDR management, vulnerability and patch management, CIS benchmark hardening, cloud security (AWS), identity and access management (IAM, MFA, conditional access), compliance framework operations (ISO 27001, SOC 2), team hiring and development
Preferred skills
Rapid7 InsightVM/InsightIDR, Google Workspace security, Cisco Secure Endpoint/Umbrella, Python/PowerShell scripting, business continuity planning, CISSP/CISM/GIAC certifications
Technologies
Rapid7 InsightVM, Rapid7 InsightIDR, Cisco Secure Endpoint, Cisco Umbrella, Active Directory, JumpCloud, Google Workspace, AWS, MITRE ATT&CK
Responsibilities
Build and lead the security operations team including hiring and career development; Own the end-to-end incident response program including on-call rotation and tabletop exercises; Drive maturity of security programs like automated patching and configuration management; Set technical direction for security tooling and detection tuning; Define and track security metrics for decision-making; Champion AI and automation to reduce toil; Own compliance evidence for ISO 27001 and SOC 2; Partner with IT teams to embed security into workflows
Seniority
Senior, hands-on IC with people leadership
