Security Operations Manager

The Security Operations Manager leads a multi-discipline security team covering application security, threat detection, vulnerability management, red/purple team activities, and security automation, with a heavy emphasis on detection, readiness, and real-world risk reduction.

The role is at the intersection of secure development, threat detection, and operational maturity within a large, multi-cloud online banking environment. Large-bank experience is preferred.

• People leadership for a multi-discipline cyber team (6 to 12 direct reports)
• Threat detection
• Penetration testing readiness and follow-through
• Red / blue / purple team integration
• Reducing enterprise attack surface

• Manage and develop a team of security professionals across vulnerability management, threat detection & threat intelligence, red/purple team disciplines, and security automation
• Act as the escalation point for high-risk or high-impact cyber issues

• Oversee SAST, DAST, SCA, manual testing, and penetration testing programs
• Drive shift-left App Sec - IDE scanning, CI/CD integration, and secure coding practices
• Reduce testing cycles and downstream findings by improving early detection
• Operate tool-agnostic (e.g., Veracode, Invicti, Burp)
• Ensure App Sec supports modern cloud-native and Dev Ops environments
• Build trusted relationships with Shadow IT owners, and progressively align with security tooling, testing, and IT security practices.

• Own detection-focused security outcomes, not just vulnerability reporting
• Work closely with SOC and IR teams to improve detection signals
• Use pen-test and red-team insights to strengthen blue-team defenses
• Apply purple-team thinking to close gaps between offense and defense

• Ensure strong internal and third-party penetration testing coverage
• Validate that findings are meaningful, prioritized, and remediated
• Use offensive testing to drive real defensive improvements

• Oversee vulnerability and configuration management programs
• Maintain hardening standards, baselines, and remediation tracking
• Reduce enterprise attack surface across cloud, applications, and infrastructure
• Integrate App Sec, pen-test, and vulnerability data into risk-based prioritization

• Multi-cloud environment
• High-availability online banking systems
• Highly regulated financial services setting
• Heavy collaboration with engineering, cloud, risk, and executive leaders

• 10+ years in cybersecurity spanning App Sec, threat detection, incident response, and vulnerability management
• 3–5+ years leading multi-disciplinary security teams
• Demonstrated success reducing attack surface and improving detection speed
• Strong understanding of application security; threat detection & response; penetration testing & adversary simulation; and CI/CD and cloud-native environments
• Comfortable presenting to and influencing executives
• Large-bank experience preferred, with the adaptability to thrive in a smaller-bank environment