Security Operations Lead — AI & Incident Response

Forward Financing; United States; On-site; USD 172,000 - 237,000; Full time

Benefits offered by this job

Remote-first company

Total rewards package

Office locations

Paid parental leave

Job summary

Forward Financing seeks a senior security leader to build and run our security engineering program across endpoints, SaaS, and cloud infrastructure. You will hire, mentor, and guide a high-performing team, while shaping detection and response strategies in a fast-paced fintech environment.

You will own incident response, oversee risk assessments, and drive AI security initiatives as the company scales its tech and security footprint, with remote-first flexibility and strong compensation.

Qualifications

• 7+ years in detection engineering, security operations, or incident response, with leadership.
• Deep knowledge of adversary TTPs (MITRE ATT&CK) and high-signal detection design.
• Hands-on experience with EDR/SIEM and detection-as-code.
• Incident command experience: triage, containment, forensics, stakeholder comms.
• Experience securing SaaS and endpoint fleets with config management and patching.
• Ability to communicate risk and priorities to engineers and executives.
• Cloud control-plane monitoring and identity threat detection (AWS).
• Scripting ability in Python, Ruby, or Go.
• Bachelor's degree in CS or equivalent, or equivalent industry exp.
• Experience with SSPM or CASB tooling.

Responsibilities

• Hire and develop a team of security engineers to defend endpoints and SaaS assets.
• Own security of corporate systems, including configuration hardening and vulnerability oversight.
• Lead security operations and incident response as senior Incident Commander.
• Own and tune detection and response, including CrowdStrike.
• Build and maintain detection coverage across endpoints, SaaS, identity, logs and traffic.
• Partner to implement controls: allowlists, egress proxy, DLP.
• Collaborate with AppSec on detection from pentesting.
• Set quality and coverage standards and report metrics.
• Conduct enterprise-wide cybersecurity risk assessments.
• Own AI security build and hire specialized team for AI deployment.

Skills

Security leadership

MITRE ATT&CK

EDR/SIEM

Incident command

SaaS security

Risk communication

Cloud monitoring (AWS)

Scripting: Python/Ruby/Go

SSPM/CASB

Education

Bachelor's Degree in CS or equivalent

Job description

Forward Financing seeks a senior security leader to build and run our security engineering program across endpoints, SaaS, and cloud infrastructure. You will hire, mentor, and guide a high-performing team, while shaping detection and response strategies in a fast-paced fintech environment.

You will own incident response, oversee risk assessments, and drive AI security initiatives as the company scales its tech and security footprint, with remote-first flexibility and strong compensation.