Remote Lead, Information Security & Threat Detection

OpenKrill; United States; Remote; USD 150,000 - 220,000; Full time

Job summary

OpenKrill is seeking a Lead Information Security Engineer to own incident management, threat detection, and continual security posture improvements while leading a four-person information security team. You will guide priorities, mentor engineers, and drive security initiatives across DevOps and other teams.

The role blends hands-on technical work with people management in a fully remote setup, offering global collaboration and opportunities to evolve security capabilities in response to

Qualifications

• 8+ years in SecOps, cloud security, incident response, or a similar role.
• 3+ years managing a security team, including mentoring engineers, setting priorities, and coordinating workloads.
• At least 5 years of experience in threat analysis, SIEM alert investigation, detection engineering, noise reduction, and incident management.
• At least 3 years of experience working with CSPM tools.
• At least 5 years of experience working for a cloud-based, global technology product company.
• Hands-on experience with EDR/XDR tools and endpoint investigation.
• Experience with vulnerability management and risk-based prioritization.
• Strong understanding of cloud security principles and experience working with AWS and/or Google Cloud Platform.
• Ability to combine hands-on technical expertise with team leadership, ensuring effective execution while supporting the development of team members.
• Strong communication and collaboration skills, with the ability to work effectively with technical teams and stakeholders across the business.

Responsibilities

• -Team Leadership and Management: Lead and manage a team of four security professionals, providing direction, technical guidance, mentoring, and support to drive individual development and overall team performance.
• -SecOps and Threat Detection: Own and continuously improve incident management processes, ensuring effective investigation, response, and resolution of security incidents.
• -Detection and Response: Improve threat detection capabilities, optimize SIEM alerting to reduce noise and false positives, develop and maintain incident response playbooks, and strengthen email security.
• -Security Policies and Standards: Develop security guides and define, implement, and monitor security measures to protect Job&Talent’s systems, data, and operations.
• -Security Tooling and Processes: Drive the continuous improvement of security tools, processes, and standards to provide consistent security assurance across the business.
• -Cloud Security: Use CSPM tool to monitor and improve cloud security configurations across AWS, Azure, and Google Cloud Platform.
• -Cross-functional Collaboration: Work closely with DevOps teams to integrate security into cloud deployment environments, infrastructure, and CI/CD pipelines.
• -Risk Management: Perform risk assessments, threat modeling, and security reviews, ensuring risks are identified, prioritized, and addressed effectively.
• -Logging and Visibility: Improve logging, monitoring, visibility, and evidence collection across corporate and production systems.
• -Continuous Improvement: Establish best practices, identify opportunities to improve operational efficiency, and ensure the team continuously develops its technical capabilities in response to evolving threats.

Skills

SecOps

Cloud security

Threat analysis

SIEM

EDR/XDR

Vulnerability management

AWS & GCP

Team leadership

Communication

Tools

CSPM tools

EDR/XDR tools

SIEM tooling

Cloud security tooling

Job description

OpenKrill is seeking a Lead Information Security Engineer to own incident management, threat detection, and continual security posture improvements while leading a four-person information security team. You will guide priorities, mentor engineers, and drive security initiatives across DevOps and other teams.

The role blends hands-on technical work with people management in a fully remote setup, offering global collaboration and opportunities to evolve security capabilities in response to