Manager, InfoSecurity Operations

Overview

Create a healthier, brighter future for pets, pet parents and people!

If you want to make a real difference, create an exciting career path, feel welcome to be your whole self and nurture your wellbeing, Petco is the place for you.

Our core values capture that spirit as we work to improve lives by doing what's right for pets, people and our planet.

Petco is a category-defining health and wellness company focused on improving the lives of pets, pet parents and Petco partners. We are 29,000 strong and operate 1,500+ pet care centers in the U.S., Mexico and Puerto Rico, including 250+ Vetco Total Care hospitals, hundreds of preventive care clinics and eight distribution centers. We're focused on purpose-driven work, and strongly believe what's good for pets, people and our planet is good for Petco.

Incident Response & Threat Management (25%)

• Lead real-time response to security incidents, making containment and remediation decisions that minimize business impact
• Manage escalations from our MSSP and make rapid triage decisions on security alerts
• Conduct post-incident reviews and drive remediation of root causes
• Develop and maintain incident response runbooks, playbooks, and procedures

Security Platform Engineering & Architecture (40%)

• Own architecture, deployment, and optimization of security operations stack including SIEM, EDR, NDR, SOAR, and related detection/response platforms
• Drive complex security engineering projects from conception through production deployment, including enterprise-scale initiatives like secure web gateway deployments, network security architecture, and cloud security tooling
• Develop detection rules, automation workflows, and integrations to improve mean-time-to-detect (MTTD) and mean-time-to-respond (MTTR)
• Design and implement security solutions protecting network infrastructure, cloud environments, and data across retail locations, corporate, and ecommerce operations
• Troubleshoot complex security platform issues and optimize configurations for performance and efficacy

Vendor & Partner Management (10%)

• Serve as primary technical liaison with our managed security service provider, managing SLAs, escalations, and service quality
• Evaluate and onboard new security technologies and services
• Coordinate with networking, cloud, and infrastructure teams on security architecture decisions

Team Leadership & Development (25%)

• Directly manage and mentor a team of 3 security professionals
• Provide technical direction, skill development, and career coaching
• Build team capabilities in key areas like cloud security incident response
• Maintain on-call rotation and ensure team readiness for 24/7 incident response
• Set clear performance expectations and deliver regular feedback

• 5+ years hands-on information security experience with at least 3 years focused on security operations, incident response, or security engineering
• 2+ years people management experience leading security analysts or engineers
• Proven track record executing complex security platform or infrastructure deployments from start to finish
• Hands-on technical expertise with at least 3 of the following platform categories:
  • SIEM platforms (e.g., Splunk, Microsoft Sentinel, Chronicle, Elastic, Sumo Logic, Data Dog)
  • Endpoint Detection & Response / EDR (e.g., Crowd Strike, Sentinel One, Microsoft Defender, Carbon Black)
  • Network Detection & Response / NDR (e.g., Extra Hop, Vectra, Darktrace, Corelight)
  • Security Orchestration, Automation & Response / SOAR platforms
  • Secure Web Gateways, Cloud Access Security Brokers, or Zero Trust Network Access solutions
  • Next-Generation Firewalls, IDS/IPS, or Network Access Control systems
• Direct experience leading or participating in security incident investigations, containment, and remediation
• Strong enterprise networking knowledge including network architecture, routing/switching, and SD-WAN
• Excellent communication skills for coordination of incident response efforts

Strongly Preferred

• Experience with secure web gateway or SASE solutions (e.g., Zscaler, Netskope, Palo Alto Prisma Access, Cato)
• Cloud security experience (AWS, Azure, GCP) including security tooling, architecture, and incident response
• Scr…