Security Operations Team Lead

Safe Software is looking for a Security Operations Team Lead to build and lead our security operations function. This is a new role, and the person in it will own the programs, processes, and people that make security operations work  have an immediate opening and are excited to find the right candidate to join our team.

Reporting to the Director of Information Security, you’ll take ownership of the programs on our roadmap — incident response, vulnerability and patch management, system hardening and configuration management, device trust and conditional access, and resiliency planning — and turn them from initiatives into durable, measurable practices. This is also a people‑leadership role: you’ll manage the Security Operations Engineers who deliver that work, starting with a small team and growing it as the function matures.

It’s a leadership role, and a hands‑on one. You’ll stay close enough to the work to make good technical calls, carry a share of the on‑call rotation, and be credible with the engineers you lead. We’re looking for someone with a first stretch of leadership behind them who wants substantially more ownership than they’ve had so far, and the support to grow into it.

You’ll also set the tone for how security shows up urity only works when it feels like a partnership rather than an obstacle, and the best security operations leaders we’ve worked with treat other teams as partners with their own pressures and deadlines. That’s the disposition we’re hiring for.

About The Team
Information Security at Safe protects the data, systems, and people behind FME and the 25,000+ enterprise customers who rely on it. We’re a growing, high‑trust team that partners closely with teams across Safe rather than operating as a separate gate.

We’re at a genuinely interesting period of growth and opportunity: we’re building programs, not just maintaining them. Incident response, resiliency planning, configuration management, and vulnerability management are all being stood up or significantly matured right now, and this role drives much of that work. This means real latitude to decide how security operations should work at Safe.

We also lean on AI and automation to cut toil, sharpen investigations, and move faster. Part of this role is setting both the expectation and the guardrails for how the team experiments with them.

What You’ll Be Doing
As the Security Operations Team Lead, you will:

Build and lead the security operations team , including hiring, onboarding, coaching, performance, and career development. You’ll set the bar for how the team works, then grow the team as the function scales.

Own the incident response program end to end  — the process, the runbooks, the on‑call rotation, the tabletop exercises, and the post‑incident reviews. You’ll act as incident commander for significant events, carry a share of the on‑call rotation, and make sure every incident makes the next one easier.

Own the security operations roadmap and its delivery , translating strategy into prioritized, resourced work with clear outcomes, and reporting on progress, risk, and where you need help.

Drive programs and processes to maturity  — automated patch management, CIS benchmark adoption for system hardening and configuration management, device trust and conditional access, vulnerability management with meaningful SLAs, and resiliency planning.

Set the technical direction for our security tooling , ensuring Rapid7 InsightVM (vulnerability management) and InsightIDR (SIEM), Cisco Secure Endpoint (EDR), Cisco Umbrella, Active Directory, Jump Cloud, Google Workspace, and AWS security controls are configured, tuned, and delivering real detection value rather than noise.

Define and track the metrics that matter  — detection…