Manager, Cyber Security

Ping Identity; Denver (CO); Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Generous PTO & Holiday Schedule

Parental Leave

Progressive Healthcare Options

Retirement Programs

Opportunity for Education Reimbursemen

Commuter Offset (Specific locations)

Job summary

Ping Identity is seeking a Cyber Security Manager to lead the Cyber Security Engineering team, overseeing incident response, security operations, and automation to protect our enterprise systems and SaaS platforms.

You will drive capacity, incident readiness, and cross-functional collaboration across engineering, infrastructure, product, and operations to improve security outcomes while fostering a high-performing security culture.

Qualifications

• Experience leading or managing day-to-day security operations, security engineering, incident response, or technical operations teams.
• Strong background in operational delivery, including prioritisation, planning, delegation, and continuous improvement.
• Experience building team capacity, improving operational processes, and developing technical capabilities within a security function.
• Required Incident Response experience, including coordination of complex incidents involving multiple teams.
• Experience with automation within Security Orchestration and Automation tooling, as well as bespoke scripting automation.
• Experience with Security Information and Event Management systems, ideally Google Chronicle and YARA-L.
• Strong understanding of cloud environments, preferably AWS and GCP.
• Experience working with container technologies, notably Kubernetes and Docker, in development and incident response contexts.
• Experience deploying, operating, or utilising Endpoint Detection and Response tools.
• Experience leading cross-functional projects and influencing teams outside of direct reporting lines.
• Ability to communicate operational priorities, technical risk, and delivery trade-offs clearly to technical and non-technical audiences.
• Strong judgement, ownership, and decision-making during security incidents and operational escalations.

Responsibilities

• Run and coordinate daily Cyber Security Engineering team activities.
• Improve planning, prioritisation, delegation, and delivery across the team.
• Develop incident response, detection engineering, automation, and security operations capabilities.
• Lead and coach team members.
• Design and implement incident response playbooks.
• Coordinate incident response across teams.
• Assess system design, change, and operational risk.
• Manage weekly on-call rotation and escalation.
• Deliver reliable, maintainable security solutions.
• Guide detection engineering across enterprise and SaaS.
• Identify gaps and translate into solutions.
• Align priorities with CSE roadmap.
• Collaborate with engineering, infra, product, and operations.
• Partner with teams to improve security outcomes.

Skills

Incident Response

Security Operations

Security Engineering

Automation

Cloud Security (AWS/GCP)

Kubernetes & Docker

EDR (Endpoint Detection and Response)

SIEM (Google Chronicle)

Threat Intelligence integration

Team Leadership

Tools

Google Chronicle

YARA-L

Kubernetes

Docker

EDR tools

Job description

About Ping Identity:

At Ping Identity, we believe in making digital experiences both secure and seamless for all users, without compromise. We call this digital freedom. And it's not just something we provide our customers. It's something that inspires our company. People don't come here to join a culture that's built on digital freedom. They come to cultivate it.

About Ping Identity:

At Ping Identity, we believe in making digital experiences both secure and seamless for all users, without compromise. We call this digital freedom. And it's not just something we provide our customers. It's something that inspires our company. People don't come here to join a culture that's built on digital freedom. They come to cultivate it.

Our intelligent, cloud identity platform lets people shop, work, bank, and interact wherever and however they want. Without friction. Without fear.

While protecting digital identities is at the core of our technology, protecting individual identities is at the core of our culture. We champion every identity. One of our core values, Respect Individuality, reminds us to celebrate differences so you are empowered to bring your authentic self to work.

We're headquartered in Denver, Colorado and we have offices and employees around the globe. We serve the largest, most demanding enterprises worldwide, including more than half of the Fortune 100. At Ping Identity, we're changing the way people and businesses think about cybersecurity, digital experiences, and identity and access management.

As a Ping Cyber Security Manager, you will be responsible for Running the day-to-day operational delivery of the Cyber Security Engineering team. You will help ensure the team has the capacity, structure, processes, and capabilities needed to protect our enterprise systems, including our Software-as-a-Service business areas. This role will take ownership of operational coordination, team execution, incident readiness, prioritisation, on-call operations, and continuous improvement across CSE.

You will provide direction across incident response, security automation, detection engineering, secure configuration, and operational security improvements. This role requires a strong technical background, proven Incident Response experience, sound operational judgement, and the ability to turn security priorities into sustainable ways of working for the team.

This role would be well suited to an experienced security leader with a background in Security Operations, Security Engineering, Incident Response, or Site Reliability Engineering who is looking to manage and mature a high-performing cyber security engineering function.

You will:

• Run and coordinate the day-to-day operational activities of the Cyber Security Engineering team
• Build operational capacity across the team by improving planning, prioritisation, delegation, and delivery practices
• Develop and mature team capabilities across incident response, detection engineering, automation, and security operations
• Lead, coach, and support members of the Cyber Security Engineering team
• Run and mature incident response processes, including the design, development, and implementation of incident response playbooks
• Support incident response coordination across multi-disciplinary teams
• Provide technical and operational leadership in the assessment of system design, change, and operational risk
• Participate in and improve the team’s weekly on-call rotation, including escalation, response quality, handover, and operational readiness
• Lead the design, development, and implementation of engineered security solutions that are reliable, maintainable, and scalable
• Guide and support detection engineering activities across enterprise and SaaS environments
• Identify operational gaps, risks, and areas of the business that require security improvement, then translate them into clear, workable solutions
• Influence and align the team’s operational priorities with the wider CSE vision, roadmap, and strategy
• Collaborate cross-functionally to support delivery of roadmap items, projects, and security improvements
• Partner with engineering, infrastructure, product, and operations teams to improve security outcomes across Ping

Requirements

• Experience leading or managing day-to-day security operations, security engineering, incident response, or technical operations teams
• Strong background in operational delivery, including prioritisation, planning, delegation, and continuous improvement
• Experience building team capacity, improving operational processes, and developing technical capabilities within a security function
• Required Incident Response experience, including coordination of complex incidents involving multiple teams
• Experience with automation within Security Orchestration and Automation tooling, as well as bespoke scripting automation
• Experience with Security Information and Event Management systems, ideally Google Chronicle and YARA-L
• Strong understanding of cloud environments, preferably AWS and GCP
• Experience working with container technologies, notably Kubernetes and Docker, in development and incident response contexts
• Experience deploying, operating, or utilising Endpoint Detection and Response tools
• Experience leading cross-functional projects and influencing teams outside of direct reporting lines
• Ability to communicate operational priorities, technical risk, and delivery trade-offs clearly to technical and non-technical audiences
• Strong judgement, ownership, and decision-making during security incidents and operational escalations
• Participation in the team’s on-call rotation is required for this position

You have an advantage if:

• You have experience building or leading a Security Operations Centre, Cyber Security Engineering, Detection Engineering, or technical operations function
• You have experience defining operating models, team roadmaps, operational maturity plans, or capability development plans
• You have experience utilising and integrating threat intelligence into security systems

Life at Ping:

We believe in and facilitate a flexible, collaborative work environment. We’re growing quickly, but remain true to the innovative, can-do startup values that got us here. Most importantly, we keep hiring talented, smart, fun, and genuinely nice people because that’s who we want to succeed with every day.

Here are just a few of the things that make Ping special:

• A company culture that empowers you to do your best work.
• Employee Resource Groups that create a sense of belonging for everyone.
• Regular company and team bonding events.
• Competitive benefits and perks.
• Global volunteering and community initiatives

Our Benefits:

• Generous PTO & Holiday Schedule
• Parental Leave
• Progressive Healthcare Options
• Retirement Programs
• Opportunity for Education Reimbursement
• Commuter Offset (Specific locations)

Ping is the collective sum of all our individual experiences, backgrounds and influences and we pride ourselves in growing and learning together. We are committed to building an inclusive and diverse environment where everyone’s individuality is respected and everyone has an Identity. In recruiting for new colleagues, we welcome the unique contributions you can bring and encourage you to be your best self.

We are an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected Veteran Status, or any other characteristic protected by applicable federal, state, or local law.