Head of Security Operations & AI Defense

Forward Financing; Boston, Northern (MA, KY); Hybrid; USD 172,000 - 237,000; Full time

Benefits offered by this job

Remote-first culture

Medical, dental, and vision benefits

Commuter benefits

Paid parental leave

401k match

Wellness reimbursement

Professional development budget

Volunteering days

Job summary

Forward Financing is seeking a Manager, Security Operations to defend our infrastructure, SaaS, and endpoints by building and leading a team of security engineers. You will drive AI security strategy, incident response, and risk assessments while collaborating with cross-functional teams and executives.

You will own detection tooling, tune response funnels, and ensure robust security posture across corporate systems, with remote-first flexibility and a strong emphasis on hiring and development

Qualifications

• 7 or more years in detection engineering, security operations, or incident response, including team leadership.
• Deep familiarity with adversary TTPs (MITRE ATT&CK), event correlation, and high-signal detection design.
• Hands-on experience with EDR/SIEM platforms and detection-as-code practices.
• Incident command experience: triage, containment, forensics, and stakeholder communication under pressure.
• Experience securing SaaS environments and endpoint fleets — configuration management, access governance, and vulnerability/patch management.
• Ability to communicate risk and priorities crisply to engineers and executives.
• Cloud control-plane monitoring and identity threat detection (AWS).
• Scripting/automation in Python, Ruby, or Go.
• Typically has a Bachelor's Degree in Computer Science or equivalent technical degree, or equivalent industry experience.
• Experience with SaaS security posture management (SSPM) or CASB tooling.

Responsibilities

• Lead security operations and incident response as senior Incident Commander for SIRT.
• Own and tune detection and response funnel and the CrowdStrike platform.
• Build coverage across endpoint, SaaS, and identity signals; audit logs and network traffic.
• Partner with teams to contain external exposure via allowlists, proxies, and DLP.
• Collaborate with AppSec on detection opportunities surfaced by pentesting.
• Set quality and coverage standards for detection and response and report on metrics.
• Conduct enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, apps, and processes.
• Own AI security as a zero-to-one build and guide hiring for specialized team.

Skills

Detection engineering

Security operations

Incident response

Team leadership

MITRE ATT&CK

Event correlation

High-signal detection

EDR/SIEM

Detection-as-code

Incident command

SaaS security

CASB

Python

Ruby

Go

AWS security

Bachelor's degree

CrowdStrike

Education

Bachelor's Degree in Computer Science or equivalent

Tools

CrowdStrike

EDR

SIEM

Job description

Forward Financing is seeking a Manager, Security Operations to defend our infrastructure, SaaS, and endpoints by building and leading a team of security engineers. You will drive AI security strategy, incident response, and risk assessments while collaborating with cross-functional teams and executives.

You will own detection tooling, tune response funnels, and ensure robust security posture across corporate systems, with remote-first flexibility and a strong emphasis on hiring and development