Manager, Security Operations

Why Work for KeHE?

• Full-time
• Pay Range: $/Yr.
  
  - $/Yr.
• Shift Days: , Shift Time:
• Benefits on Day 1
  • Health/Rx
  • Dental
  • Vision
  • Flexible and health spending accounts (FSA/HSA)
  • Supplemental life insurance
  • 401(k)
  • Paid time off
  • Paid sick time
  • Short term & long term disability coverage (STD/LTD)
  • Employee stock ownership (ESOP)
  • Holiday pay for company designated holidays

At KeHE, we’re obsessed with creating solutions, unboxing potential, and serving others – and it all starts with you. As an employee-owned distributor of natural and organic, specialty, and fresh products, we’re committed to making a positive impact and scaling our success together. With a culture that fosters development and opportunity, you’ll be embarking on a career that’s moving forward. When you join KeHE, you’re becoming part of a team that is a force for good.

The Security Operations Manager is a working manager who both leads and actively contributes to the organization’s information security operations. This role owns day-to-day security operations and detection, builds and operates the vulnerability management function. The role partners closely with internal teams, and external service partners to reduce risk, respond to incidents, mature security processes, and build a scalable program with direct reports, budget input, and tool ownership consolidating under it.

As with all positions at KeHE Distributors, we expect that all actions will be consistent with KeHE’s Mission, Vision, and Values.

DUTIES, TASKS AND RESPONSIBILITIES:

Security Operations Support

• Own day-to-day security operations, including alert triage standards, escalation paths, incident response coordination, and the operating rhythm of the internal SOC function.
• Partner with managed security service providers to ensure effective coverage, service quality, and timely response.
• Support the development and maintenance of incident response processes, playbooks, and escalation procedures.
• Help coordinate response and investigation activities with internal teams and external partners as needed.
• Drive detection engineering improvements across SIEM and endpoint tooling, and own operational metrics such as mean time to detect and respond.
• Manage and continuously improve security technologies across the stack, such as endpoint detection and response (EDR/XDR), SIEM, email security, and vulnerability management, and own the co-managed MDR/MSSP partnership.

Vulnerability Detection & Threat Response

• Operate and schedule vulnerability scanning across the environment (infrastructure, endpoint, network, and external/attack-surface), owning scan coverage, cadence, and the health and tuning of the scanning tools.
• Continuously monitor vulnerability and threat detection outputs, validating and triaging new findings for exploitability and exposure.
• Lead time-sensitive threat and vulnerability response: track emerging threats and actively-exploited vulnerabilities (threat intelligence, zero-days), assess the organization’s exposure, and coordinate urgent response and containment.
• Partner with Security Engineering and IT teams to align scanning coverage with the asset inventory and close detection gaps.

Program Development & Leadership

• Help develop and mature the broader information security program in partnership with IT Leadership, taking on new focus areas as priorities evolve.
• Recruit, mentor, and develop security staff as the team grows; build repeatable processes so the program is not dependent on any single individual.
• Define operating procedures, escalation paths, and reporting cadences for the functions this role builds.
• Demonstrate Company’s Core Competencies and values held within.

Reporting & Stakeholder Management

• Produce regular security metrics…