Remote Manager - Security Operations & Incident Response

Fivetran, Inc.; Oakland (CA); Remote; USD 187,000 - 233,000; Full time

Benefits offered by this job

100% employer-paid medical insurance *

Generous paid time away from work, etc

RSU stock grants*

Professional development and training

Company virtual happy hours, free food

Monthly cell phone stipend

Access to mental health platform

May vary by country - recruiter info

Job summary

Fivetran is seeking a Manager of Security Operations, Incident Detection and Response to lead a high‑performing team responsible for enterprise‑wide detection, containment and remediation across multi‑tenant SaaS environments.

You will own the security tech stack, drive AI‑driven automation, collaborate with engineering, IT, and Legal, and report on MTTD/MTTR metrics while scaling security for a remote US workforce.

Qualifications

• Security Operations & Incident Response expertise with proven leadership in enterprise security.
• People management: experience hiring, developing, and leading security teams.
• Multi-tenant SaaS security experience, tenant isolation and customer data protection.
• AI proficiency to apply LLMs and AI agents for security automation.
• Cloud & infrastructure security across AWS/GCP/Azure, Kubernetes, and cloud-native logging.
• Proven ability to own a security technology roadmap, budgets, and vendor mgmt.

Responsibilities

• Lead and mentor a team of detection and response engineers and analysts; set goals and performance standards.
• Recruit, onboard, and scale security talent; design on-call rotations and hiring plans.
• Own the incident response program; act as incident commander for major security events and coordinate with Legal, Privacy, Communications, and executives.
• Build and maintain detections across cloud, identity, endpoint, SaaS, and applications using MITRE ATT&CK principles.
• Drive AI-driven security operations to automate alert triage, enrichment, and response.
• Design detector strategies for a multi‑tenant SaaS platform, ensuring tenant isolation and data protection.
• Own the security operations tech stack: SIEM, SOAR, EDR/XDR, and log pipelines; manage roadmap and budgets.
• Lead proactive threat hunting and integrate threat intelligence to mitigate emerging threats.
• Collaborate with engineering, IT, and GRC to remediate risks across pipelines and runtime environments.
• Develop automation, playbooks, and integrations to streamline security processes.

Skills

Security Operations

Incident Response

People Management

Multi-Tenant SaaS Experience

AI Proficiency

Cloud & Infrastructure Security

Detection & Response Tooling

Technology Ownership

Problem-Solving

Communication

Curiosity & Urgency

Tools

CrowdStrike

Okta

Google Workspace

Wiz

Open Source

Notion

JIRA

Job description

Fivetran is seeking a Manager of Security Operations, Incident Detection and Response to lead a high‑performing team responsible for enterprise‑wide detection, containment and remediation across multi‑tenant SaaS environments.

You will own the security tech stack, drive AI‑driven automation, collaborate with engineering, IT, and Legal, and report on MTTD/MTTR metrics while scaling security for a remote US workforce.