Manager, Security Operations

Naturally Network is an agent of change.

• Pay Range: $/Yr.
  
  - $/Yr.
• Shift Days: , Shift Time:
• Benefits on Day 1
  • Health/Rx
  • Dental
  • Vision
  • Flexible and health spending accounts (FSA/HSA)
  • Supplemental life insurance
  • 401(k)
  • Paid time off
  • Paid sick time
  • Short term & long term disability coverage (STD/LTD)
  • Employee stock ownership (ESOP)
  • Holiday pay for company designated holidays

At KeHE, we're obsessed with creating solutions, unboxing potential, and serving others - and it all starts with you. As an employee-owned distributor of natural and organic, specialty, and fresh products, we're committed to making a positive impact and scaling our success together. With a culture that fosters development and opportunity, you'll be embarking on a career that's moving forward. When you join KeHE, you're becoming part of a team that is a force for good.

The Security Operations Manager is a working manager who both leads and actively contributes to the organization's information security operations. This role owns day-to-day security operations and detection, builds and operates the vulnerability management function. The role partners closely with internal teams, and external service partners to reduce risk, respond to incidents, mature security processes, and build a scalable program with direct reports, budget input, and tool ownership consolidating under it.

As with all positions at KeHE Distributors, we expect that all actions will be consistent with KeHE's Mission, Vision, and Values.

• Own day-to-day security operations, including alert triage standards, escalation paths, incident response coordination, and the operating rhythm of the internal SOC function.
• Partner with managed security service providers to ensure effective coverage, service quality, and timely response.
• Support the development and maintenance of incident response processes, playbooks, and escalation procedures.
• Help coordinate response and investigation activities with internal teams and external partners as needed.
• Drive detection engineering improvements across SIEM and endpoint tooling, and own operational metrics such as mean time to detect and respond.
• Manage and continuously improve security technologies across the stack, such as endpoint detection and response (EDR/XDR), SIEM, email security, and vulnerability management, and own the co-managed MDR/MSSP partnership.

• Operate and schedule vulnerability scanning across the environment (infrastructure, endpoint, network, and external/attack-surface), owning scan coverage, cadence, and the health and tuning of the scanning tools.
• Continuously monitor vulnerability and threat detection outputs, validating and triaging new findings for exploitability and exposure.
• Lead time-sensitive threat and vulnerability response: track emerging threats and actively-exploited vulnerabilities (threat intelligence, zero-days), assess the organization's exposure, and coordinate urgent response and containment.
• Partner with Security Engineering and IT teams to align scanning coverage with the asset inventory and close detection gaps.

• Help develop and mature the broader information security program in partnership with IT Leadership, taking on new focus areas as priorities evolve.
• Recruit, mentor, and develop security staff as the team grows; build repeatable processes so the program is not dependent on any single individual.
• Define operating procedures, escalation paths, and reporting cadences for the functions this role builds.
• Demonstrate Company's Core Competencies and values held within.

• Produce regular security metrics and program updates for leadership reporting.
• Maintain visibility into open risks and remediation progress, escalating blockers as appropriate.
• Represent the security program in cross-functional meetings and collaborate with internal teams and external partners.

• Support GRC activities, including policy maintenance, control tracking, and risk register upkeep.
• Assist audit and certification readiness efforts, contributing to evidence collection and control documentation across stakeholders.
• Support the vendor and third-party risk management process, participating in security posture assessments and helping track findings.
• Contribute to security awareness efforts, helping ensure training and communications reach all parts of the organization.
• Participate in evaluating security practices for emerging AI and agentic tools as adoption expands across the organization.
• Provide input into governance, guardrails, and acceptable-use guidance for new technologies, balancing enablement with risk.
• Stay current on the evolving threat landscape and help the security program adapt as new risks and use cases emerge.
• The position responsibilities outlined above are in no way to be construed as all encompassing. Other…