Security Operations Lead – 24x7 Detection & Response

Altruist; San Francisco (CA); Hybrid; USD 203,000 - 275,000; Full time

Benefits offered by this job

Premium healthcare

401k with 4% match

Parental leave (16 weeks)

Employee mobility program

Work from anywhere policy

Job summary

Altruist is seeking a Security Operations Manager to lead detection, response, and 24x7 security monitoring for a self-clearing broker-dealer. The role includes building and leading a SOC team, maturing detection, threat intel ingestion, and automation, with a focus on cloud-first incidents and regulatory environments.

The position follows a hybrid schedule with three days onsite in San Francisco FiDi or Culver City, and requires hands-on experience across AWS, SIEMs, EDR/MDR, and incident

Qualifications

• 6+ years in security operations, including 2+ years leading a SOC/detection & response team.

Responsibilities

• Lead, mentor, and grow the security operations/detection & response team, setting priorities and career paths.
• ,
• ] ,
• }]} ]} } ]} } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } }
• ?

Skills

SOC leadership

Incident response

Cloud security

AWS

Threat intelligence

MDR management

Communication

Education

B.A./B.S. in Computer Science or related field

Tools

Datadog

Splunk

CrowdStrike

SentinelOne

Terraform

Kubernetes

Job description

Altruist is seeking a Security Operations Manager to lead detection, response, and 24x7 security monitoring for a self-clearing broker-dealer. The role includes building and leading a SOC team, maturing detection, threat intel ingestion, and automation, with a focus on cloud-first incidents and regulatory environments.

The position follows a hybrid schedule with three days onsite in San Francisco FiDi or Culver City, and requires hands-on experience across AWS, SIEMs, EDR/MDR, and incident