Assistant Vice President, Threat Operations

Wedbush; Pasadena (CA); Hybrid; USD 154,000 - 184,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) match

Tuition reimbursement

Paid time off

Parental leave

Job summary

Wedbush Securities in Pasadena, CA seeks an Assistant Vice President of Threat Operations to lead the security operations function, oversee threat monitoring, detection, incident response, and forensics across the enterprise. This hybrid role reports to the CISO and requires strong leadership of security engineers and analysts.

The candidate will manage detection coverage, coordinate major incident responses, and align policies with FINRA/SEC obligations, while driving automation and process

Qualifications

• Bachelor's Degree from an accredited university.
• CISSP (Certified Information Systems Security Professional) required.
• 7+ years of relevant work experience required, with 5+ years of previous managerial experience.
• GCIH (GIAC Certified Incident Handler), GCFA (GIAC Certified Forensic Analyst), GCFE (GIAC Certified Forensic Examiner), GCIA (GIAC Certified Intrusion Analyst), or CISM (Certified Information Security Manager) preferred.
• Demonstrated ability to lead, develop, and retain technical security teams, including performance management and coaching.
• Expertise in incident response, digital forensics, evidence collection and preservation, and threat intelligence.
• Working command of security operations tooling, including SIEM, endpoint detection and response, and security orchestration and automation platforms.
• Experience defining repeatable operational processes and documenting remediation to an auditable standard.
• Strong analytical and problem solving ability, with sound judgment under time pressure during active incidents.
• Ability to communicate complex technical concepts clearly, verbally and in writing, to technical and non-technical audiences including senior leadership.
• Ability to collaborate effectively with cross-functional teams and stakeholders across Technology, Compliance, and Legal.
• Working knowledge of the regulatory environment applicable to a broker-dealer, including data protection and incident notification obligations.
• Demonstrated commitment to staying current with security threats, trends, and technologies.

Responsibilities

• Oversee day-to-day security operations, including threat monitoring, detection, alert triage, and escalation across the enterprise
• Lead incident response end to end (contain, mitigate, eradicate, recover), driving post-incident review and remediation to closure
• Direct digital forensic investigations to establish root cause, scope, and impact, ensuring defensible evidence collection; serve as senior escalation point and coordinate the Firm's technical response to major incidents
• Mature detection coverage through detection engineering, tuning, and false-positive reduction, integrating threat intelligence into monitoring and hunting; unify monitoring, detection, and response into a single view across threat operations
• Own the operational execution of the Firm's data protection and incident escalation obligations as a FINRA- and SEC-registered broker-dealer.
• Improve operations processes and workflows, tracking metrics such as MTTD/MTTR to drive measurable gains; champion automation and playbook development to standardize response
• Develop and execute the security operations strategy, policies, and playbooks aligned to Firm goals, risk appetite, and regulatory obligations; partner with Technology, Compliance, Legal, and leadership to communicate risk and priorities, elevate per broker-dealer obligations, support regulatory exams/audits/client notifications, and translate technical issues for technical and executive audiences
• Own workload allocation, staffing coverage, and on-call rotation; identify capability gaps and build the business case for tooling, training, or headcount
• Hire, manage, coach, and set pay for security engineers, responders, and forensic analysts
• Set goals, run performance reviews, and build development plans to strengthen team capability across monitoring, response, and forensics
• Perform other duties as required and assigned

Skills

Bachelor's degree

CISSP

Security leadership

Incident response

Digital forensics

Threat intelligence

Security tooling

Communication

Regulatory awareness

Team coaching

Education

Bachelor's Degree

Tools

SIEM

EDR (Endpoint Detection & Response)

SOAR platforms

Job description

Job Description Wedbush Securities is one of the largest securities firms and investment banks in the nation. We provide innovative financial solutions through our Wealth Management, Capital Markets, Futures and Advanced Clearing & Prime Services divisions. Headquartered in Los Angeles, California with over 100 offices and more than 80 correspondent offices, our commitment to providing relentless, customized service is the foundation of our consistent growth.

Job Description Wedbush Securities is one of the largest securities firms and investment banks in the nation. We provide innovative financial solutions through our Wealth Management, Capital Markets, Futures and Advanced Clearing & Prime Services divisions. Headquartered in Los Angeles, California with over 100 offices and more than 80 correspondent offices, our commitment to providing relentless, customized service is the foundation of our consistent growth.

Our IT team has an immediate opening for an Assistant Vice President, Threat Operations, to report to our Pasadena office. This role will lead the Firm’s security operations function and own threat monitoring, detection, incident response, and digital forensics across the enterprise. This position reports to the Chief Information Security Officer and will work a hybrid work schedule.

Responsibilities Include, But Are Not Limited To

• Oversee day-to-day security operations, including threat monitoring, detection, alert triage, and escalation across the enterprise
• Lead incident response end to end (contain, mitigate, eradicate, recover), driving post-incident review and remediation to closure
• Direct digital forensic investigations to establish root cause, scope, and impact, ensuring defensible evidence collection; serve as senior escalation point and coordinate the Firm's technical response to major incidents
• Mature detection coverage through detection engineering, tuning, and false-positive reduction, integrating threat intelligence into monitoring and hunting; unify monitoring, detection, and response into a single view across threat operations
• Own the operational execution of the Firm's data protection and incident escalation obligations as a FINRA- and SEC-registered broker-dealer.
• Improve operations processes and workflows, tracking metrics such as MTTD/MTTR to drive measurable gains; champion automation and playbook development to standardize response
• Develop and execute the security operations strategy, policies, and playbooks aligned to Firm goals, risk appetite, and regulatory obligations; partner with Technology, Compliance, Legal, and leadership to communicate risk and priorities, elevate per broker-dealer obligations, support regulatory exams/audits/client notifications, and translate technical issues for technical and executive audiences
• Own workload allocation, staffing coverage, and on-call rotation; identify capability gaps and build the business case for tooling, training, or headcount
• Hire, manage, coach, and set pay for security engineers, responders, and forensic analysts
• Set goals, run performance reviews, and build development plans to strengthen team capability across monitoring, response, and forensics
• Perform other duties as required and assigned

Experience And Skills

• Bachelor's Degree from an accredited university
• CISSP (Certified Information Systems Security Professional) required
• 7+ years of relevant work experience required, with 5+ years of previous managerial experience
• GCIH (GIAC Certified Incident Handler), GCFA (GIAC Certified Forensic Analyst), GCFE (GIAC Certified Forensic Examiner), GCIA (GIAC Certified Intrusion Analyst), or CISM (Certified Information Security Manager) preferred
• Demonstrated ability to lead, develop, and retain technical security teams, including performance management and coaching
• Expertise in incident response, digital forensics, evidence collection and preservation, and threat intelligence
• Working command of security operations tooling, including SIEM, endpoint detection and response, and security orchestration and automation platforms
• Experience defining repeatable operational processes and documenting remediation to an auditable standard.
• Strong analytical and problem solving ability, with sound judgment under time pressure during active incidents
• Ability to communicate complex technical concepts clearly, verbally and in writing, to technical and non-technical audiences including senior leadership
• Ability to collaborate effectively with cross-functional teams and stakeholders across Technology, Compliance, and Legal
• Working knowledge of the regulatory environment applicable to a broker-dealer, including data protection and incident notification obligations
• Demonstrated commitment to staying current with security threats, trends, and technologies

What We Offer

As part of our overall compensation package, Wedbush Securities offers an array of diverse benefits to all our colleagues. We believe that providing competitive benefit options yields the advantageous reward of establishing a healthy and inclusive foundational work culture.

• Comprehensive medical, dental, and vision coverage with multiple health plan options for you and your family
• Health Savings Account with company-sponsored contributions
• Flexible Spending Accounts (FSA) traditional and dependent care
• Pre-Tax Commuter Benefits
• 401(k) plan with discretionary, competitive company matching and profit-sharing contributions
• Tuition reimbursement up to $5,250/year
• 3 weeks of Paid Time Off
• 2 weeks of Paid Sick Time (may vary by location)
• 10 Paid Holidays
• Charitable Donation Matching Contributions
• Paid Leave (Parental Bonding, Military, Jury Duty, Volunteer Time Off, Disability, etc.)
• FINRA License Sponsorship
• Travel & Employee Assistance and Employee Discount Programs

A reasonable estimate of the compensation range for this role has not been adjusted for the applicable geographic location. A reasonable estimate of the current range is $154,000 to $184,000. Colleagues may be eligible for additional, discretionary incentive compensation based on the colleague's and the firm's performance. Decisions regarding compensation are determined on a case-by-case basis and are dependent on a variety of factors including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs.

Wedbush Securities (WS) is proud to be an Equal Employment Opportunity employer. WS does not discriminate based on race, religion, color, creed, sex, sexual orientation, gender, gender identity or expression, national origin, ancestry, citizenship status, registered domestic partner status, uniform service member status, marital status, pregnancy, age, medical condition, disability, genetic information, family care or medical leave status, or any other consideration made unlawful by applicable federal, state, or local laws, or on the basis that an applicant or Colleague is perceived to have these characteristics or is associated with someone who is perceived to have these characteristics. WS aims to foster a culture of inclusion where all Colleagues are valued for their unique contributions to the firm as well as provided equal opportunities to succeed.

Wedbush uses E-Verify, an Internet-based system, to confirm the eligibility of all newly hired employees to work in the United States. Learn more about E-Verify, including your rights and responsibilities here https://www.e-verify.gov/e-verify-overview

This position is subject to various laws or regulations that impose restrictions or prohibitions for employment with Wedbush due to criminal history. Those laws or regulations include but are not limited to, the following: Securities Exchange Act of 1934 (SEA) Rule 17a-3, et. seq., Financial Industry Regulatory Authority (FINRA) Rules 3110(e), Rule 4530(a), etc., and FINRA Regulatory Notice 07-55.