Security Operations Team Lead

Join our team as the Security Operations Team Lead. In this role, you will lead a team of Security Operations Engineers, serve as incident commander for major incidents, and own the day-to-day health and improvement of our agentic SOC. You will also run our customer zero program and be hands-on in your work. The ideal candidate has 5 or more years of experience in security operations or incident response, including senior or lead-level experience.

• Lead and develop the Security Operations team, set priorities, and build career paths.
• Direct the response to major incidents, manage stakeholder communication, and own the after-action process.
• Own the metrics and roadmap for the agentic SOC, prioritize improvements, and manage the fleet of security agents.

• Technical Depth: Strong Python and detection engineering across SIEM and cloud telemetry; able to review and improve others' work
• AI-Assisted Workflows: Hands-on experience running AI-assisted and agent-based security workflows, with a clear view of where agents are reliable, where they fail, and how to measure both
• AWS Certification: AWS Security Specialty or Solutions Architect Associate, or equivalent demonstrated depth
• Incident Command: Experience running significant incidents end to end, including executive communication
• Operating Discipline: Experience defining metrics, running an operational cadence, and reporting to leadership
• Experience: 5 or more years in security operations, incident response, or detection engineering, including senior or lead-level work
• AWS Knowledge: Strong knowledge of AWS security architecture, IAM, logging, and cloud incident response
• Communication: Clear with executives and engineers; calm and decisive under pressure
• Leadership: Experience leading, mentoring, or managing engineers or analysts
• Data Security: Experience with DSPM, DLP, or operating a security product as an internal customer
• Regulated Environments: FedRAMP, SOC 2, or ISO 27001
• Certifications: GCIH, GCFA, CISSP, AWS Security Specialty, or similar