Security Ops Lead: AI Security & Incident Command Remote

Forward Financing LLC; Boston (MA); Hybrid; CAD 172,000 - 237,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

RRSP match

Wellness reimbursement

Volunteering days

Professional development budget

Charitable donation match

Job summary

Forward Financing LLC is seeking a Manager, Security Operations to lead a team defending our fintech infrastructure, SaaS estate, and endpoints. You will drive incident response, detection coverage, and AI security initiatives while collaborating with cross-functional teams and executives.

You will guide hiring, build robust controls, and establish metrics to improve overall security posture across cloud and on-premises environments. Flexible work options are available.

Qualifications

• 7+ years in detection engineering, security operations, or incident response, including team leadership.
• Familiarity with MITRE ATT&CK, event correlation, and high-signal detection design.
• Hands-on experience with EDR/SIEM platforms and detection-as-code.
• Incident command experience: triage, containment, forensics, and stakeholder communication under pressure.
• Experience securing SaaS environments and endpoint fleets - configuration management, access governance, and vulnerability/patch management.
• Ability to communicate risk and priorities crisply to engineers and executives.
• Cloud control-plane monitoring and identity threat detection (AWS).
• Scripting in Python, Ruby, or Go.
• Typically has a Bachelor's Degree in Computer Science or equivalent.
• Experience with SaaS security posture management (SSPM) or CASB tooling.

Responsibilities

• Hire, grow, and develop a team of security engineers to defend endpoints, SaaS estate, and infrastructure.
• Own the security of corporate systems including configuration hardening and vulnerability/patch oversight.
• Lead security operations and incident response as senior Incident Commander for the Security Incident Response Team (SIRT).
• Own and tune detection and response funnel and the CrowdStrike platform.
• Build and maintain detection coverage across endpoint, SaaS, and identity signals; audit/usage logs, egress-proxy traffic, DLP events, and access trails.
• Partner with other teams to build controls to contain external exposure: network allowlists, egress proxy, and DLP at proxy level.
• Partner with AppSec on detection opportunities surfaced by pentesting.
• Set quality and coverage standards for detection and response and own reporting on these metrics.
• Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes.
• Own AI security as a zero-to-one build: build upon existing detection tooling/response processes and hire to build the team.

Skills

Detection engineering

Security operations

Incident response

Team leadership

MITRE ATT&CK

EDR SIEM

Python scripting

Cloud security AWS

Executive communication

Education

Bachelor's Degree in Computer Science

Tools

CrowdStrike

SIEM platforms

Detection-as-code

Job description

Forward Financing LLC is seeking a Manager, Security Operations to lead a team defending our fintech infrastructure, SaaS estate, and endpoints. You will drive incident response, detection coverage, and AI security initiatives while collaborating with cross-functional teams and executives.

You will guide hiring, build robust controls, and establish metrics to improve overall security posture across cloud and on-premises environments. Flexible work options are available.