Security Leader - SaaS AppSec & Incident Response (Remote)

Scrut Automation; United States; Remote; USD 28,000 - 55,000; Full time

Job summary

Scrut Automation is seeking a hands-on Head of Security to own application security, security operations, and corporate security. You will be the trusted leader customers and leadership rely on during incidents.

You will manage the in-house SOC and MDR relationship, drive detection engineering, and secure a multi-tenant SaaS platform. Collaborate with engineering to accelerate delivery while maintaining risk controls, support SOC 2 and ISO 27001, and guide security reviews across cloud, data,

Qualifications

• 6+ years in security.
• Led response to high-severity incidents and post-incident improvements.
• Built or led an secure SDLC program for SaaS.
• Managed an in-house SOC and MDR/MSSP, with SLA enforcement.
• Solid cloud security skills, preferably AWS.
• Familiar with MITRE ATT&CK, OWASP Top 10, ASVS, and NIST IRG.

Responsibilities

• Own application security: secure SDLC, threat modelling, and secure coding reviews.
• Integrate security tooling into CI/CD (SAST/DAST/SCA, secrets scanning).
• Manage vulnerability triage, pen tests, and bug bounty programs.
• Secure multi-tenant SaaS platform with tenant isolation and API security.
• Lead SOC and MDR relationships; improve 24x7 monitoring and response.
• Oversee detection engineering, SIEM/EDR, and tuning to reduce noise.
• Run incident response playbooks, on-call, war rooms, and post-incident reviews.
• Coordinate threat intel and threat hunting across cloud, corporate, and product.

Skills

Security leadership

Incident response

Application security

SOC management

Cloud security

MITRE ATT&CK knowledge

Tools

SIEM

SOAR

EDR/XDR

AWS security tooling

Threat intelligence tooling

Job description

Scrut Automation is seeking a hands-on Head of Security to own application security, security operations, and corporate security. You will be the trusted leader customers and leadership rely on during incidents.

You will manage the in-house SOC and MDR relationship, drive detection engineering, and secure a multi-tenant SaaS platform. Collaborate with engineering to accelerate delivery while maintaining risk controls, support SOC 2 and ISO 27001, and guide security reviews across cloud, data,