Job Summary:We are seeking a Manager, Information Security to lead the execution of our Security Operations and Engineering program. This is a hands-on, player-coach role: you will manage a small, high-caliber team of 2-3 direct reports while also personally rolling up your sleeves on engineering, triage, and incident response when needed. You will own the roadmap and day-to-day execution across Web Application Firewall (WAF), Data Loss Prevention (DLP), AI Security and Security Automation, Vulnerability Management, Incident Management, Cloud Security, Purple Team, and broader Security Engineering across our infrastructure.
Duties and Responsibilities: - Execute the Security Operations and Engineering strategy, aligning priorities with overall business and security goals.
- Operate as a player-coach: manage, mentor, and grow 2-3 direct reports while remaining hands-on with engineering and operational work.
- Partner with the CISO and cross-functional leaders (Engineering, IT, Compliance, HR, Legal) to align security initiatives with business needs.
- Manage team capacity, priorities, and career development; conduct performance reviews and coaching.
- Own vendor and tooling deployments.
- Report on program metrics, risk posture, and roadmap progress to Senior leaders
- Web Application Firewall (WAF): Own configuration, tuning, and lifecycle management of WAF policies to protect production applications from evolving threats.
- Data Loss Prevention (DLP): Design, implement, and continuously improve DLP controls across endpoints, cloud, and email to protect sensitive data.
- AI Security / Automation: Evaluate and secure AI tools and workflows used across the business; build automation (including AI-assisted) to scale detection, triage, and response.
- Vulnerability Management: Own the end-to-end vulnerability management lifecycle: scanning, prioritization, remediation tracking, and reporting - across infrastructure and applications.
- Incident Management: Lead incident response efforts, from detection through containment, eradication, and post-incident review; maintain and improve incident response playbooks.
- Cloud Security: Set and enforce cloud security architecture, configuration standards, and controls across our cloud environments.
- Purple Team: Run and mature purple team exercises, partnering offense and defense to validate detection and response capabilities and close gaps.
- Security Engineering: Design, build, and maintain security tooling and infrastructure (detection engineering, logging/SIEM, automation pipelines) across the environment.
- Perform other duties as assigned.
Education and Experience:- 7+ years of experience in information security, with at least 2-3 years in a people management or team lead capacity.
- Demonstrated player-coach experience: comfortable managing a team while remaining technically hands-on.
- Hands-on experience with WAF platforms, DLP tooling, vulnerability management platforms, and cloud security controls (AWS, Azure, and/or GCP).
- Experience leading or participating in incident response, including root cause analysis and post-incident reporting.
- Experience building or deploying automation to scale security operations; exposure to AI/LLM tooling and its security implications is a strong plus.
- Relevant certifications (e.g., CISSP, CISM, GCIH, OSCP, or cloud security certifications) are a plus but not required.
Knowledge, Skills and Abilities: - Familiarity with purple team methodologies and how offensive testing informs defensive engineering.
- Strong scripting/automation skills (e.g., Python, Terraform or similar) for tooling and detection engineering.
- Excellent communication skills, with the ability to translate technical risk for executive and non-technical audiences.
- Proven ability to context-switch across strategic, operational, and tactical work without losing focus or quality.
Work Environment:
- Office setting with a moderate noise level.
- The employee will work at an individual workstation, using a telephone and computer.
Physical Demands:
- Must be able to remain seated for extended periods.
- Regular use of a computer and other office machinery, such as printers and copy machines.
- Occasional movement around the office.
- Frequent communication via telephone.
