Source Job

$200,000–$250,000/yr
US

  • Mature and lead Security & Threat Operations, setting the operating model and roadmap for threat detection, investigation, and incident response.
  • Own detection engineering, monitoring, digital risk, exposure management, and security controls across AWS and corporate environments.
  • Act as Incident Commander during significant security incidents and partner with engineering, DevOps, and product teams to drive defensive improvements.

Security Operations Incident Response Threat Intelligence SIEM AWS

20 jobs similar to Security & Threat Operations Manager

Jobs ranked by similarity.

$140,000–$200,000/yr
United States

  • Lead and grow the SOC, owning detection strategy and incident response across both production and corporate estates.
  • Architect an AI-first operating model for the SOC, building automation for triage, enrichment, and investigation.
  • Partner with Platform Engineering to extend detection into production and cloud workloads, treating detection content as code.

Motive empowers the people who run physical operations with tools to make their work safer, more productive, and more profitable. The company serves nearly 100,000 customers across a wide range of industries, including transportation, logistics, construction, energy, and more.

Netherlands

  • Monitor security events and provide technical analysis on alerts
  • Lead information security incidents and employee insider investigations by developing the incident response strategy and executing through closure
  • Deliver security guidance clearly and concisely for incident response and insider threat initiatives

Samsara (NYSE: IOT) is the pioneer of the Connected Operations Cloud, helping organizations reliant on physical operations harness IoT data for actionable insights. As a recently public company, it offers autonomy and support to make an impact, with a culture focused on building for the long term.

Brazil Unlimited PTO

  • Lead security incident response end-to-end across cloud, identity, and workload logs.
  • Build and tune SIEM detections in Datadog across AWS, Kubernetes, and Google Workspace.
  • Automate detection and response tasks using Python and Terraform, and mentor engineers.

Loadsmart is a logistics technology company reinventing freight by helping shippers, brokers, warehouses, and carriers move more with less. It is a growth-stage tech unicorn valued at over $1 billion, with a globally distributed remote team.

Global

  • Contribute to the development, tuning, and maintenance of security monitoring and detection capabilities across SIEM, EDR, and cloud platforms.
  • Support the onboarding, integration, and testing of security data sources and telemetry feeds.
  • Collaborate with threat intelligence and incident response teams to translate requirements into effective detection mechanisms.

Talan is an international consulting group specializing in innovation and business transformation through technology. With over 7,200 consultants in 21 countries and a turnover of €850M, they are committed to delivering impactful, future-ready solutions.

$120,000–$150,000/yr
US

  • Fix vulnerabilities across the stack by writing pull requests in application repositories and Terraform.
  • Build and tune SIEM detections, mapping coverage to MITRE ATT&CK and reducing false positives.
  • Lead incident response, harden AWS estate, and automate security workflows with code.

Cloudbeds is a hospitality management platform powering hotels across 150 countries, processing billions in bookings annually. The company is a remote-first team of 650+ across 40+ countries, recognized for innovation and an inclusive culture.

India

  • Monitor, triage, and investigate security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms.
  • Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS.
  • Support incident response, remediation, and recovery activities.

Pragmatike recruits for major international organizations, specializing in cybersecurity and cloud enterprise security. They operate a global 24/7 Cybersecurity Operations Centre with a team of security specialists across different regions.

$105,000–$105,000/yr
US

  • Act as the primary escalation point and technical lead for complex incidents.
  • Enhance monitoring by tuning alerts, refining detection logic, and automating workflows.
  • Mentor junior engineers and document incident response procedures.

DYOPATH is a managed security services provider that helps organizations defend against evolving cyber threats through security operations and monitoring. The company fosters an award-winning culture guided by its L.O.V.E. philosophy, emphasizing teamwork, respect, and professional growth.

EMEA

  • Monitor, triage, and investigate security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms.
  • Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS.
  • Support incident response, remediation, and recovery activities while collaborating with global cybersecurity teams.

Pragmatike is a recruitment firm that recruits on behalf of major international organizations in the cybersecurity and cloud security space. They are committed to a fair, transparent, and inclusive recruitment process, fostering a culture of diversity and global collaboration.

US

  • Lead threat modeling and security reviews across Wiz's products and cloud infrastructure, identifying attack surfaces and developing scalable mitigation strategies.
  • Build automation, policy-as-code, and security tooling that enables development teams to 'shift left' and integrate end-to-end security into their workflows.
  • Drive vulnerability management and remediation efforts, prioritizing issues, implementing mitigations, and designing strategic preventative controls in software supply chains from development through production.

Wiz is redefining security for the AI era, enabling teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. As one of the fastest-growing startups ever, we are trusted by over 65% of the Fortune 100 and scan over 230 billion files daily, with a culture that values world-class talent and is now powered by Google.

Colombia

  • Safeguard customer digital assets, sensitive data, and critical systems against cyber threats as part of the MXDR team.
  • Leverage expertise in vulnerability identification, robust security implementation, and incident response to enhance security posture.
  • Collaborate with cross-functional teams to assess risks, formulate security strategies, and ensure adherence to industry standards.

Check Point Software Technologies is a leading vendor of cybersecurity solutions, protecting against sophisticated threats and attacks. The company has been honored by Time Magazine as one of the World’s Best Companies for 2024 and recognized as one of the World’s Top Female-Friendly Places to Work.

$208,500–$235,750/yr
US

  • Lead enterprise-scale security operations, including 24/7 SOC oversight, real-time detection, and automation.
  • Direct incident response, forensics, and risk-reduction programs across cloud and hybrid infrastructure.
  • Architect SIEM, SOAR, and AI/ML platforms; build and mentor high-performing cybersecurity teams.

U.S. FinTech operates the world's largest mortgage securitization platform, supporting the Uniform Mortgage-Backed Security of Fannie Mae and Freddie Mac. The company fosters a culture of innovation and flexibility, serving 70% of mortgage-backed securities in the market.

$157,675–$238,500/yr
US

  • Build, deploy, and continuously improve MITRE ATT&CK–aligned detections across cloud, endpoint, identity, email, and application telemetry with clear false-positive thresholds.
  • Own the full detection lifecycle from hypothesis and data validation through deployment, tuning, and retirement.
  • Advance the detection-as-code platform with version control, peer review, automated testing, CI/CD, and improved pipeline reliability and observability.

Samsara is the pioneer of the Connected Operations™ Cloud, helping organizations that depend on physical operations to harness IoT data for actionable insights. They are a recently public company with a high-caliber team, embracing a flexible working model that supports remote and hybrid work.

Canada

  • Provide technical and operational leadership for a Security Operations Center, monitoring threats and driving incident response.
  • Design and develop security tools and platforms to improve detection, response, and operational efficiency.
  • Mentor early-career engineers and contribute to open source security projects and industry conferences.

Jobgether uses AI-powered matching to help candidates find jobs. The company operates a fully distributed, remote-first environment with in-person team events.

$204,500–$330,700/yr
US

  • Lead and manage the Product Security team, shaping a risk-driven security program in partnership with the Director of Security.
  • Guide engineering teams to own their security health, with automation handling first-pass findings and Security validating rather than fixing.
  • Act as incident manager of record, delegated approver, and drive monthly and quarterly security posture reporting.

LaunchDarkly provides a feature management platform that helps developers release software safely and efficiently through gradual rollouts and targeted experiences. The company values high trust, transparency, and a humble, collaborative team culture.

Sweden

  • Identify and respond to security incidents on a global scale.
  • Act as incident commander to drive incidents through the entire response lifecycle.
  • Design and maintain security alerts, automated actions, playbooks and escalation workflows.

Mozilla Corporation is a non-profit-backed technology company that makes pioneering brands like Firefox and focuses on AI, social media, security, and more. With over 225 million monthly users, Mozilla is wholly owned by the Mozilla Foundation and strives to reclaim an internet built for people.

$120,000–$150,000/yr
US

  • Protect cloud infrastructure, applications, and customer data across a modern technology environment.
  • Identify and remediate vulnerabilities directly in application repositories and infrastructure code.
  • Build and tune SIEM detections, strengthen AWS security controls, and lead incident response.

Cloudbeds is a hospitality technology company providing cloud-based management solutions for lodging businesses. It operates as a remote-first organization with a globally distributed team across 40+ countries and a small, senior security team.

$225,400–$281,800/yr
US Unlimited PTO

  • Lead detection and response strategy for Apollo's Security team, building detection systems and response automations hands-on.
  • Own detection architecture, security observability, and incident response readiness across cloud and SaaS environments.
  • Drive AI-augmented detection and response, measuring gains in speed, coverage, and signal quality.

Apollo.io is a leading go-to-market platform for revenue teams, providing verified contact data and engagement tools for over 500,000 companies. Founded in 2015, it has raised ~$250M, is valued at $1.6B, and fosters an AI-native culture of continuous improvement.

UK

  • Lead and grow a team of security engineers focused on protecting cloud-native environments and CI/CD pipelines.
  • Drive technical strategy, threat modeling, and security automation across multi-cloud infrastructure.
  • Partner with engineering and DevOps teams to embed secure-by-design principles and manage vulnerability and supply chain security.

Wiz is a cybersecurity company that provides a cloud security platform connecting code, cloud, and runtime to secure cloud and AI applications. It is one of the fastest-growing startups, trusted by over 65% of the Fortune 100, and now powered by Google, with a culture that values world-class talent.

North America

  • Architect detection engineering and incident response strategy across cloud, identity, endpoints, and AI/ML pipelines.
  • Design AI-assisted SecOps workflows that automate triage, enrichment, and containment using LLMs and custom tooling.
  • Lead investigations, purple-team testing, and threat intelligence to defend against AI-driven threats.

Fullscript is a health technology company that empowers practitioners to deliver better care through clinical insights, analytics, education, and supplements. With over 125,000 practitioners and 10 million patients, it fosters a people-first, collaborative culture and flexible remote-friendly work.

$214,200–$308,000/yr
US

  • Serve as deputy to the CISO, representing security to executives, customers, and regulators.
  • Lead and grow managers and senior engineers across Security Engineering and Security Operations.
  • Own the security roadmap, including cloud security, detection and response, identity, and platform security.

Abnormal Security uses behavioral AI to protect organizations from sophisticated email and collaboration attacks. Trusted by 5,000 enterprises, the company values security engineering, partnership, and a paved-path approach to reducing risk.