Security Operations Manager

First-Horizon-Bank; Charlotte (NC); On-site; USD 150,000 - 230,000; Full time

Job summary

First-Horizon-Bank is seeking a Security Operations Manager to lead a multi-discipline cyber team in a large, multi-cloud online banking environment, focusing on detection, readiness, and real-world risk reduction.

You will oversee vulnerability management, penetration testing readiness, and red/blue/purple team integration while partnering with engineering, risk, and executive leadership to reduce the enterprise attack surface in a highly regulated financial services setting.

Qualifications

• 10+ years in cybersecurity spanning AppSec, threat detection, incident response, and vulnerability management
• 3–5+ years leading multi-disciplinary security teams
• Strong understanding of application security; threat detection & response; penetration testing & adversary simulation; and CI/CD and cloud-native environments
• Comfortable presenting to and influencing executives
• Large-bank experience preferred, with the adaptability to thrive in a smaller-bank environment

Responsibilities

• Lead a multi-discipline cyber team of 6–12 direct reports and mentor staff
• Oversee SAST/DAST/ SCA programs and secure coding in CI/CD
• Drive shift-left AppSec integration with IDE scanning
• Own detection-focused security outcomes and coordinate with SOC/IR
• Ensure thorough internal and third-party penetration testing coverage
• Oversee vulnerability management, hardening standards, and risk-based remediation

Skills

Threat detection

Application security

Vulnerability management

Penetration testing

Security automation

Leadership

CI/CD integration

Cloud-native environments

Tools

Veracode

Invicti

Burp Suite

Job description

The Security Operations Manager leads a multi-discipline security team covering application security, threat detection, vulnerability management, red/purple team activities, and security automation, with a heavy emphasis on detection, readiness, and real-world risk reduction.

The role is at the intersection of secure development, threat detection, and operational maturity within a large, multi-cloud online banking environment. Large-bank experience is preferred.

What the Manager Owns

• People leadership for a multi-discipline cyber team (6 to 12 direct reports)
• Threat detection
• Penetration testing readiness and follow-through
• Red / blue / purple team integration
• Reducing enterprise attack surface

Key Responsibilities

Leadership & Team Management

• Manage and develop a team of security professionals across vulnerability management, threat detection & threat intelligence, red/purple team disciplines, and security automation
• Act as the escalation point for high-risk or high-impact cyber issues

Application Security

• Oversee SAST, DAST, SCA, manual testing, and penetration testing programs
• Drive shift-left AppSec - IDE scanning, CI/CD integration, and secure coding practices
• Reduce testing cycles and downstream findings by improving early detection
• Operate tool-agnostic (e.g., Veracode, Invicti, Burp)
• Ensure AppSec supports modern cloud-native and DevOps environments
• Build trusted relationships with Shadow IT owners, and progressively align with security tooling, testing, and IT security practices.

Threat Detection & Purple Teaming

• Own detection-focused security outcomes, not just vulnerability reporting
• Work closely with SOC and IR teams to improve detection signals
• Use pen-test and red-team insights to strengthen blue-team defenses
• Apply purple-team thinking to close gaps between offense and defense

Penetration Testing & Offensive Readiness

• Ensure strong internal and third-party penetration testing coverage
• Validate that findings are meaningful, prioritized, and remediated
• Use offensive testing to drive real defensive improvements

Vulnerability & Configuration Risk Reduction

• Oversee vulnerability and configuration management programs
• Maintain hardening standards, baselines, and remediation tracking
• Reduce enterprise attack surface across cloud, applications, and infrastructure
• Integrate AppSec, pen-test, and vulnerability data into risk-based prioritization

Environment & Scope

• Multi-cloud environment
• High-availability online banking systems
• Highly regulated financial services setting
• Heavy collaboration with engineering, cloud, risk, and executive leaders

Required Experience

• 10+ years in cybersecurity spanning AppSec, threat detection, incident response, and vulnerability management
• 3–5+ years leading multi-disciplinary security teams
• Demonstrated success reducing attack surface and improving detection speed
• Strong understanding of application security; threat detection & response; penetration testing & adversary simulation; and CI/CD and cloud-native environments
• Comfortable presenting to and influencing executives
• Large-bank experience preferred, with the adaptability to thrive in a smaller-bank environment