Security Operations Lead: Threat Detection & AppSec

First-Horizon-Bank; Charlotte (NC); On-site; USD 150,000 - 230,000; Full time

Job summary

First-Horizon-Bank is seeking a Security Operations Manager to lead a multi-discipline cyber team in a large, multi-cloud online banking environment, focusing on detection, readiness, and real-world risk reduction.

You will oversee vulnerability management, penetration testing readiness, and red/blue/purple team integration while partnering with engineering, risk, and executive leadership to reduce the enterprise attack surface in a highly regulated financial services setting.

Qualifications

• 10+ years in cybersecurity spanning AppSec, threat detection, incident response, and vulnerability management
• 3–5+ years leading multi-disciplinary security teams
• Strong understanding of application security; threat detection & response; penetration testing & adversary simulation; and CI/CD and cloud-native environments
• Comfortable presenting to and influencing executives
• Large-bank experience preferred, with the adaptability to thrive in a smaller-bank environment

Responsibilities

• Lead a multi-discipline cyber team of 6–12 direct reports and mentor staff
• Oversee SAST/DAST/ SCA programs and secure coding in CI/CD
• Drive shift-left AppSec integration with IDE scanning
• Own detection-focused security outcomes and coordinate with SOC/IR
• Ensure thorough internal and third-party penetration testing coverage
• Oversee vulnerability management, hardening standards, and risk-based remediation

Skills

Threat detection

Application security

Vulnerability management

Penetration testing

Security automation

Leadership

CI/CD integration

Cloud-native environments

Tools

Veracode

Invicti

Burp Suite

Job description

First-Horizon-Bank is seeking a Security Operations Manager to lead a multi-discipline cyber team in a large, multi-cloud online banking environment, focusing on detection, readiness, and real-world risk reduction.

You will oversee vulnerability management, penetration testing readiness, and red/blue/purple team integration while partnering with engineering, risk, and executive leadership to reduce the enterprise attack surface in a highly regulated financial services setting.