Senior Manager, Security Operations - Detection Engineering & Incident Response

THE ROLE

As the Senior Manager of Security Operations, you will lead and scale Everpure's global Detection Engineering and Cloud Incident Detection & Response (CIDR) teams. You will own the mission of transforming SecOps into a proactive, intelligence-driven defense engine that measurably reduces risk across cloud, SaaS, infrastructure, and endpoint environments. Partnering closely with GRC, Infrastructure, Product Security, and Engineering leadership, you will establish operational work plans, detection standards, and response strategies that safeguard the Everpure Platform against sophisticated global threats.

WHAT YOU'LL DO

• Direct Detection Engineering & Incident Response Strategy: Establish operational objectives, work plans, and SLAs across threat detection, automated response workflows, and incident triage to continuously optimize Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).

• Champion Threat-Informed Detection & Validation: Lead the deployment and continuous refinement of a high-signal detection inventory mapped to MITRE ATT&CK, validating control efficacy through automated simulations, red/purple team exercises, and threat hunt findings.

• Streamline Telemetry Ingestion & Automation: Oversee the architectural ingestion of multi-cloud (AWS, Azure), endpoint, network, and SaaS log sources into SIEM and SOAR pipelines, reducing false positives and accelerating automated remediation.

• Lead Executive Incident Governance & Postmortems: Direct major incident response efforts, oversee root-cause analyses, and translate complex security metrics into actionable executive dashboards and board-level risk reports that drive cross-functional remediation.

• Manage & Develop SecOps Engineering Teams: Direct resource allocation, budget priorities, and professional development across multiple specialized security squads, cultivating a high-performing team culture focused on operational excellence.

• We are primarily an in-office environment and therefore, you will be expected to work from the Santa Clara, CA office in compliance with Everpure's policies, unless you are on PTO, or work travel, or other approved leave.

WHAT YOU BRING

• SecOps & Incident Leadership Expertise: Proven track record of leading and scaling enterprise security operations, detection engineering, and incident response functions across hybrid cloud and SaaS environments.

• Advanced Technical & Telemetry Mastery: Deep technical command of SIEM and SOAR platforms, EDR solutions, cloud telemetry architectures, and detection-as-code principles integrated with modern CI/CD pipelines.

• Threat Modeling & Governance Savvy: Comprehensive mastery of threat-informed defense methodologies, MITRE ATT&CK framework mapping, and control validation through atomic testing and threat hunting.

• Executive Communication & Cross-Functional Influence: Demonstrated ability to interact with executive leadership, navigate complex risk discussions with Infrastructure and Engineering teams, and align technical posture with business priorities.

INCLUDE FOR POSTING LOCATION IDENTIFICATION

#LI-ONSITE