Lead SecOps & Cyber Defense — Senior Manager

Bullish; New York (NY); On-site; USD 185,000 - 235,000; Full time

Job summary

Bullish US LLC & CoinDesk Inc. are seeking an experienced Manager / Sr. Manager of SecOps & Cyber Defense to lead, scale, and actively drive 24/7 security detection and response capabilities in the US, UK, & EMEA.

In this dual-capability role, you will lead a lean, highly technical group of SOC analysts and incident responders while remaining deeply connected to the engineering work. You will sit in the hot seat during major incidents, build high‑efficacy detection pipelines across

Qualifications

• 8+ years in SOC operations, threat detection and incident response.
• 2+ years of direct people management, remote teams welcome.
• Cloud-native threats across AWS/GCP/Azure; Kubernetes/Docker; modern SaaS.
• Strong SIEM/EDR/XDR, log aggregation, and SOAR tooling.
• Scripting in Python/Bash/Go to automate triage and API tasks.
• Familiar with network protocols, identity systems (Okta/Azure AD), and forensics.

Responsibilities

• Lead and mentor a small SOC and IR team across time zones.
• Own on-call escalations for high-severity incidents; set shift coverage.
• Define SOC metrics and drive continuous improvement.
• Collaborate with infra, cloud, DevOps, and legal/compliance teams.
• Drive end-to-end incident response, containment, and root-cause analysis.
• Design high-precision detection rules and threat hunting playbooks.
• Lead Red/Purple team exercises and tabletop simulations.
• Develop automated response playbooks with SOAR and scripts.

Skills

SOC operations

Threat detection

Incident response

Cloud security

Kubernetes Docker

SIEM EDR XDR

SOAR automation

Scripting: Python Bash Go

Threat hunting

Incident management

Education

Security certifications

Tools

Not specified

Job description

Bullish US LLC & CoinDesk Inc. are seeking an experienced Manager / Sr. Manager of SecOps & Cyber Defense to lead, scale, and actively drive 24/7 security detection and response capabilities in the US, UK, & EMEA.

In this dual-capability role, you will lead a lean, highly technical group of SOC analysts and incident responders while remaining deeply connected to the engineering work. You will sit in the hot seat during major incidents, build high‑efficacy detection pipelines across