Cyber Security Operations Lead

Ping Identity; Denver (CO); Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Generous PTO & Holiday Schedule

Parental Leave

Progressive Healthcare Options

Retirement Programs

Opportunity for Education Reimbursemen

Commuter Offset (Specific locations)

Job summary

Ping Identity is seeking a Cyber Security Manager to lead the Cyber Security Engineering team, overseeing incident response, security operations, and automation to protect our enterprise systems and SaaS platforms.

You will drive capacity, incident readiness, and cross-functional collaboration across engineering, infrastructure, product, and operations to improve security outcomes while fostering a high-performing security culture.

Qualifications

• Experience leading or managing day-to-day security operations, security engineering, incident response, or technical operations teams.
• Strong background in operational delivery, including prioritisation, planning, delegation, and continuous improvement.
• Experience building team capacity, improving operational processes, and developing technical capabilities within a security function.
• Required Incident Response experience, including coordination of complex incidents involving multiple teams.
• Experience with automation within Security Orchestration and Automation tooling, as well as bespoke scripting automation.
• Experience with Security Information and Event Management systems, ideally Google Chronicle and YARA-L.
• Strong understanding of cloud environments, preferably AWS and GCP.
• Experience working with container technologies, notably Kubernetes and Docker, in development and incident response contexts.
• Experience deploying, operating, or utilising Endpoint Detection and Response tools.
• Experience leading cross-functional projects and influencing teams outside of direct reporting lines.
• Ability to communicate operational priorities, technical risk, and delivery trade-offs clearly to technical and non-technical audiences.
• Strong judgement, ownership, and decision-making during security incidents and operational escalations.

Responsibilities

• Run and coordinate daily Cyber Security Engineering team activities.
• Improve planning, prioritisation, delegation, and delivery across the team.
• Develop incident response, detection engineering, automation, and security operations capabilities.
• Lead and coach team members.
• Design and implement incident response playbooks.
• Coordinate incident response across teams.
• Assess system design, change, and operational risk.
• Manage weekly on-call rotation and escalation.
• Deliver reliable, maintainable security solutions.
• Guide detection engineering across enterprise and SaaS.
• Identify gaps and translate into solutions.
• Align priorities with CSE roadmap.
• Collaborate with engineering, infra, product, and operations.
• Partner with teams to improve security outcomes.

Skills

Incident Response

Security Operations

Security Engineering

Automation

Cloud Security (AWS/GCP)

Kubernetes & Docker

EDR (Endpoint Detection and Response)

SIEM (Google Chronicle)

Threat Intelligence integration

Team Leadership

Tools

Google Chronicle

YARA-L

Kubernetes

Docker

EDR tools

Job description

Ping Identity is seeking a Cyber Security Manager to lead the Cyber Security Engineering team, overseeing incident response, security operations, and automation to protect our enterprise systems and SaaS platforms.

You will drive capacity, incident readiness, and cross-functional collaboration across engineering, infrastructure, product, and operations to improve security outcomes while fostering a high-performing security culture.