Manager, Security Operations

Forward Financing; Boston, Northern (MA, KY); On-site; USD 172,000 - 237,000; Full time

Benefits offered by this job

Remote-first culture

Medical, dental, and vision benefits

Commuter benefits

Paid parental leave

401k match

Wellness reimbursement

Professional development budget

Volunteering days

Job summary

Forward Financing is seeking a Manager, Security Operations to defend our infrastructure, SaaS, and endpoints by building and leading a team of security engineers. You will drive AI security strategy, incident response, and risk assessments while collaborating with cross-functional teams and executives.

You will own detection tooling, tune response funnels, and ensure robust security posture across corporate systems, with remote-first flexibility and a strong emphasis on hiring and development

Qualifications

• 7 or more years in detection engineering, security operations, or incident response, including team leadership.
• Deep familiarity with adversary TTPs (MITRE ATT&CK), event correlation, and high-signal detection design.
• Hands-on experience with EDR/SIEM platforms and detection-as-code practices.
• Incident command experience: triage, containment, forensics, and stakeholder communication under pressure.
• Experience securing SaaS environments and endpoint fleets — configuration management, access governance, and vulnerability/patch management.
• Ability to communicate risk and priorities crisply to engineers and executives.
• Cloud control-plane monitoring and identity threat detection (AWS).
• Scripting/automation in Python, Ruby, or Go.
• Typically has a Bachelor's Degree in Computer Science or equivalent technical degree, or equivalent industry experience.
• Experience with SaaS security posture management (SSPM) or CASB tooling.

Responsibilities

• Lead security operations and incident response as senior Incident Commander for SIRT.
• Own and tune detection and response funnel and the CrowdStrike platform.
• Build coverage across endpoint, SaaS, and identity signals; audit logs and network traffic.
• Partner with teams to contain external exposure via allowlists, proxies, and DLP.
• Collaborate with AppSec on detection opportunities surfaced by pentesting.
• Set quality and coverage standards for detection and response and report on metrics.
• Conduct enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, apps, and processes.
• Own AI security as a zero-to-one build and guide hiring for specialized team.

Skills

Detection engineering

Security operations

Incident response

Team leadership

MITRE ATT&CK

Event correlation

High-signal detection

EDR/SIEM

Detection-as-code

Incident command

SaaS security

CASB

Python

Ruby

Go

AWS security

Bachelor's degree

CrowdStrike

Education

Bachelor's Degree in Computer Science or equivalent

Tools

CrowdStrike

EDR

SIEM

Job description

Forward Financing is a financial technology company based in Boston, Massachusetts with team members throughout the United States, Dominican Republic, and Canada. The company is on a mission to unlock the capital that fuels small businesses across America. Recognized as a Best Place to Work by Built In Boston and certified as a Great Place To Work®, Forward is investing in its employees, technology, and customer experience – with long-term success in mind every step of the way.

As Manager, Security Operations, you will defend our infrastructure, SaaS, and endpoints by hiring, growing, and developing a team of high-quality security engineers. You will collaborate closely with cross-functional technical teams, AppSec, and executive stakeholders to advance our AI security strategy and build robust detection controls. You will be the point person to lead incident response as senior Incident Commander, drive cybersecurity risk assessments, and maintain a seamless, hardened security posture against real-world adversaries.

In this role you will:

Hire, grow, and develop a team of high-quality security engineers to defend our endpoints, SaaS estate, and infrastructure against real-world adversaries.

Own the security of our corporate systems (SaaS applications and endpoints) including configuration hardening and vulnerability/patch oversight.

Lead security operations and incident response, acting as senior Incident Commander for the Security Incident Response Team (SIRT).

Own and tune our detection and response funnel and our CrowdStrike detection platform.

Build and maintain detection coverage across endpoint, SaaS, and identity signals; audit/usage logs, egress-proxy traffic, DLP events, and access trails.

Partner with other teams to build controls to contain external exposure: network allowlists, egress proxy, and proxy-level DLP.

Partner with AppSec on detection opportunities surfaced by pentesting.

Set quality and coverage standards for detection and response and own reporting on these metrics

Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes

Own AI security as a zero-to-one build: build upon our existing detection tooling/response processes and execute our hiring plan to build the specialized team needed to keep pace with Forward's AI deployment

Why you should apply:

Make a real difference in our security posture by driving the advancement of our AI security strategy. While this isn't a zero-to-one build from the ground up, you will have the opportunity to make a tangible impact by evolving detection and response processes to defend our critical infrastructure.

Make a high-impact, hands-on impact: You will have the unique opportunity to lead the advancement of our AI security strategy, evolving our detection tooling and response processes to stay ahead of emerging threats, while owning and tuning our detection/response funnel to defend a critical fintech infrastructure against real-world adversaries.

Flexibility is a top priority: Our employees are empowered to choose where they want to work (whether that’s from home, in the office, or a combination of both) with flexible hours.

Role Requirements:

7 or more years in detection engineering, security operations, or incident response, including team leadership.

Deep familiarity with adversary TTPs (MITRE ATT&CK), event correlation, and high-signal detection design.

Hands-on experience with EDR/SIEM platforms and detection-as-code practices.

Incident command experience: triage, containment, forensics, and stakeholder communication under pressure.

Experience securing SaaS environments and endpoint fleets — configuration management, access governance, and vulnerability/patch management.

Ability to communicate risk and priorities crisply to engineers and executives.

Cloud control-plane monitoring and identity threat detection (AWS).

Scripting/automation in Python, Ruby, or Go.

Typically has a Bachelor's Degree in Computer Science or equivalent technical degree, or equivalent industry experience.

Experience with SaaS security posture management (SSPM) or CASB tooling.

It would be nice if you also had:

Experience with Gen-AI triage or LLM-as-Judge patterns in production.

CISSP and/or CISM certification

Red-team exposure — you think like an attacker.

Compensation:

Compensation:
Annual Salary: $172,000 - $237,000 USD
Annual Bonus: You have the potential to earn an additional 12% annual bonus.

At Forward Financing, we're committed to fair and transparent compensation. We believe in providing a compensation package that recognizes your skills, experience, and the unique value you bring to our team. We take a market-basedapproach to pay, regularly reviewing benchmark data to ensure our compensation remains competitive, equitable, and aligned with our performance-driven culture.

Final offers are determined by a variety of factors, including the candidate's qualifications, relevant experience, specific skills, and internal equity. This approach ensures that our compensation is competitive and equitable. Your recruiter will provide specific details on the expected base and variable earnings as it pertains to this specific role.

Total Rewards:

Additionally, we offer a comprehensive total rewards package, including but not limited to: medical, dental, vision, commuter benefits, a flexible time-off policy, paid parental leave, 401k match for US employees, wellness reimbursement, volunteering days, annual professional development budget, and charitable donation match.

Forward is proud to be a remote-first company, keeping workplace flexibility a top priority for our employees. As a business, we are focused on impact; we are more concerned with your contributions to the success of the company than where you get your work done. To help facilitate in-person collaboration, employees are welcome to work from one of our premiere office locations.

When we aren’t collaborating to drive business and support our customers, we’re finding virtual and in-person ways to get to know our colleagues, celebrate team wins, and have fun together!

Our Culture: The Forward Compass

The Forward Compass is the standard we hold for ourselves and one another—guiding how we lead, collaborate, and show up every day to move in the same direction.

Back the Builders: We are wired to fuel customer progress, not just provide support.

Rooted in People: We create an environment that balances deep connection with the extreme ownership and honesty required to reach our highest potential.

Flying V: We move through coordinated effort with speed and urgency to achieve what no individual could do alone.

Always Forward, Never Finished: We pursue growth with a relentless drive that keeps us ahead of the competition.

About Us:

Forward Financing is a fintech company based in Boston, Massachusetts with team members throughout the United States, Dominican Republic, and Canada. The company is on a mission to unlock the capital that fuels small businesses across America. Whether facing challenges accessing traditional financing or simply needing a convenient, flexible solution, Forward is committed to funding more of the millions of small businesses nationwide. By simplifying the requirements, streamlining the process, and using advanced proprietary technology, Forward is often able to deliver approvals within hours and funds that same day – giving more businesses the financial opportunity they need to thrive. Plus, with their dedicated teams and award-winning service, customers get personalized support when they need it most.

Since 2012, Forward has expanded access to capital by providing over $4.8 billion in funding to more than 92,000 small businesses. The company is A+ rated by the Better Business Bureau with an Excellent / 4.7 stars rating on Trustpilot.com . Recognized as a Best Place to Work by Built In Boston and certified as a Great Place To Work®, Forward is dedicated to empowering both its team and the customers they serve, helping them succeed and thrive.

U.S. Equal Opportunity Employment Information

Forward Financing is proud to be an equal opportunity employer, and is committed to fostering a fair and inclusive culture built on a foundation of high performance and exceptional customer experience. With a laser focus on employee impact, we’re able to reduce biases and ensure the right people are in the right jobs to contribute to our mission. The varied perspectives of our people fuel innovation and make us a stronger team. By embracing what makes each of us unique, we create a supportive environment where people feel valued, accepted, and empowered to thrive.