Security Operations Leader (Hybrid/Remote)

SPS Commerce Inc; Minneapolis (MN); Hybrid; USD 134,000 - 204,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Disability insurance

Life insurance

Paid time-off

401(k)

Stock purchase plan

Job summary

SPS Commerce Inc is seeking a Manager II, Security Operations to lead a Cyber Defense team and an 8-person SOC pod. You will direct incident response, oversee AI agents in triage and response, and partner with the ACE function to advance agentic capabilities.

You will manage MSP relationships, drive SecOps strategy, and own tooling like CrowdStrike, NG-SIEM, and SOAR. This role is hybrid from Minneapolis with strong cross-functional impact.

Qualifications

• 8+ years in security operations, detection engineering, or incident response.
• Experience maturing cyber capabilities and leading transformation.
• Direct MSP/MSSP relationships experience at scale.

Responsibilities

• Own SOC operational performance, including alert triage metrics and time-to-containment.
• Serve as incident commander for Sev1 and escalated security incidents.
• Own operational accountability for AI agents in the SOC and detection pipeline.
• Manage MSP/contractor relationships for the SOC pod, onboarding and performance.
• Translate strategy into a tactical SecOps roadmap and manage Jira sequencing.
• Oversee core Cyber Defense tooling such as SIEM, NG-SIEM migration, and SOAR runbooks.
• Run a 24x7 on-call rotation across FTE and contractor coverage.
• Provide coaching and career development for Cyber Defense engineers and analysts.

Skills

Security leadership

Incident command

People management

Strategic SecOps planning

Tools

CrowdStrike

NG-SIEM

SOAR

Jira

EDR

Job description

SPS Commerce Inc is seeking a Manager II, Security Operations to lead a Cyber Defense team and an 8-person SOC pod. You will direct incident response, oversee AI agents in triage and response, and partner with the ACE function to advance agentic capabilities.

You will manage MSP relationships, drive SecOps strategy, and own tooling like CrowdStrike, NG-SIEM, and SOAR. This role is hybrid from Minneapolis with strong cross-functional impact.