Manager, Security Operations

Description

The company is a preemptive security platform founded in 2012 that combines exposure discovery and assessment, offensive testing, and intelligence built on AI and human insight. It helps organizations find and confirm real-world risk before attackers do. It is based in San Francisco and New Hampshire and backed by General Catalyst, Rally Ventures, Costanoa Ventures, and others.

This role leads a team of Security Consultants and makes sure security submissions are triaged, validated, and resolved on time and accurately. You will need a solid technical base in application security, incident response, and vulnerability assessment, along with proven people leadership. The person in this role develops their team, improves operations using data and automation, and works across functions to get strong results for customers.

Responsibilities

• Lead, coach, and grow a team of Security Consultants through regular feedback, career development, and performance management.
• Act as the subject matter expert in at least one security specialty (web, network, cloud, or mobile) and advise internal and external stakeholders on technical questions.
• Handle every vulnerability submission type and oversee complex escalations and appeals, working with other business units as needed.
• Measure team performance, find where automation can help, and put process improvements in place.
• Plan and rank team workloads as business needs and customer priorities shift.
• Coach team members and help the wider security organization grow by sharing knowledge and providing technical leadership.
• Build cross-functional relationships that improve workflows and produce strong customer outcomes.
• Run effective meetings, state priorities clearly, and make sure action items get done on time.
• Serve as a trusted advisor to leadership and customers, offering sound technical judgment and operational insight.
• Track security industry standards, new threats, and best practices so the team keeps improving.

Requirements

• 5+ years of experience in Security Operations, Application Security, Incident Response, Vulnerability Management, or a closely related field.
• Prior experience leading, supervising, or mentoring technical teams.
• Strong grasp of common vulnerability classes, including the OWASP Top 10.
• Hands-on experience with incident response, vulnerability triage, and validation.
• Strong analytical, problem-solving, organizational, and decision-making skills.
• Excellent written and verbal communication, with the ability to influence both technical and non-technical stakeholders.
• Preferred: proven ability to juggle multiple priorities in a fast-paced environment.
• Preferred: OSCP or a comparable security certification, or equivalent hands-on offensive security or vulnerability research experience.
• Preferred: experience using Python to automate workflows or process operational data.
• Preferred: experience building dashboards in Tableau or a similar business intelligence tool to support data-driven decisions.
• Preferred: a record of delivering operational improvements through metrics, automation, and continuous improvement work.

Conditions

Expect periodic travel for business needs, including onsite events such as Bug Bashes and customer-facing engagements, plus in-office events at irregular intervals. Travel varies with business priorities and should be treated as a recurring part of the job.

Pay is based on US national averages and may be adjusted to fit the business. The current national estimate for the base range is $129,280 to $161,600.

The role may be eligible for a discretionary bonus or commission plan, governed by that program's rules, with any award depending on individual and company performance.

The company aims to be fair and equitable and to create an environment where people do their best work. Its compensation approach is to build a collaborative community that rewards, attracts, and keeps strong talent.