Senior Manager, Security Engineering & Operations

Senior Manager, Security Engineering & Operations |

Location:

Remote | USA, Canada |

Reports to:

Chief Information Security Officer |

Employment Type:

Full-time | This is a new vacancy.

The Senior Manager will lead a combined Security Engineering and Operations function for North America, overseeing vulnerability management, incident response, threat hunting, and hands-on security engineering. You will establish the managed vulnerability service engagement, define SLAs and remediation processes, and scale the team from unsustainable crisis-mode incident response to proactive threat management and strategic engineering. This role requires both operational discipline and technical credibility.

• Lead and develop the Security Operations Engineer, Senior Security Engineer, and Security Engineers; build high-performing teams and coaching culture
• Establish vulnerability management program with our partners, defining SLAs, tracking mechanisms, remediation governance, and executive reporting
• Design and maintain enterprise incident response procedures, playbooks, escalation paths, and threat intelligence integration
• Oversee 24x7 on-call rotation, work with HR and operations to improve sustainability, and reduce burnout while maintaining response quality
• Manage the transition from crisis response mode) to strategic engineering focus and modernization work
• Develop KPIs for detection, response, and remediation; report quarterly to CISO on team metrics and program health
• Lead hands-on security engineering projects including infrastructure hardening, threat hunting, and controls validation
• Interface with Cloud Platform, Infrastructure, and Development teams to embed security into engineering practices
• Mentor team on automation, scripting, and process improvement to reduce manual toil

• 12+ years in security operations, incident response, or security engineering roles with hands-on technical depth
• 7+ years managing security teams of 5+ engineers with demonstrated team development and coaching ability
• Hands-on experience with SIEM, vulnerability scanning, remediation tracking, and detection rule development
• Proven track record transitioning teams from reactive incident response to proactive threat hunting and engineering
• Experience managing managed security service provider (MSSP) or managed vulnerability service engagements
• Strong leadership ability; commitment to team development, sustainability, and psychological safety

• CISSP, CISM, or CEH certification
• Experience with Nessus, Qualys, or similar vulnerability management platforms
• Background in incident response program maturity, metrics, and automation
• Experience scaling security operations in growth-stage organizations

This position has a starting salary range of $130,000 - $170,000 CAD / $160,000 - $200,000 USD per year. The range represents what we reasonably and in good faith expect to pay for the role at the time of posting. An employee's pay within the range is determined by a number of factors, including relevant skills, education, qualifications, experience, performance, business or organizational needs, and geographic location.

Eligible employees may participate in medical, dental, vision, disability, life insurance, retirement savings programs, paid time off, wellness programs, and other company-sponsored benefits. Benefits vary by country and employment status.

JD Power powers auto-related decisions through proprietary data, advanced analytics, deep industry expertise, and workflows that connect insight to action.

Operating across North America, Europe, and Australia, we help customers make better decisions and achieve better outcomes.

As a virtual-first company, we offer flexible work arrangements, opportunities for learning and development, and a culture centered on the Values that guide how we work every day.

We power our customers' success. Everything we do is focused on helping customers make better decisions and achieve better outcomes.

We are innovative, collaborative, and grounded in data. We combine advanced analytics with human expertise to deliver insight that holds up in the real world.

We make things easy. We turn complexity into clarity so teams can act faster and with confidence.

We get it done. We focus on execution, accountability, and results.

We start with trust and prove it every day. Independence, integrity, and credibility are the foundation of our work.