Security Ops Leader: Detection Eng. & Incident Response

Pure Storage, Inc.; Santa Clara (CA); On-site; USD 225,000 - 281,000; Full time

Benefits offered by this job

Equity

Incentive pay

Flexible time off

Wellness resources

Job summary

Everpure is seeking a Senior Manager of Security Operations to lead Detection Engineering and CIDR teams globally. You will shape proactive, intelligence-driven defense across cloud, SaaS, and endpoints, partnering with GRC, Infra, Product Security, and Engineering to set objectives and incident response strategies.

The role emphasizes MITRE ATT&CK alignment, automated detection, SIEM/SOAR pipelines, and executive dashboards.

Qualifications

• Proven track record leading and scaling enterprise security operations, detection engineering, and incident response.
• Deep command of SIEM and SOAR platforms, EDR, cloud telemetry architectures, and CI/CD pipelines.
• Mastery of threat-informed defense methodologies and MITRE ATT&CK mapping with validation via testing.
• Excellent executive communication and cross-functional influence to align security with business goals.

Responsibilities

• Direct Detection Engineering & Incident Response Strategy: set objectives, work plans, and SLAs to optimize MTTD and MTTR.
• Champion Threat-Informed Detection & Validation: deploy and refine a detection inventory mapped to MITRE ATT&CK; validate via simulations and threat hunts.
• Streamline Telemetry Ingestion & Automation: oversee multi-cloud and endpoint data into SIEM/SOAR pipelines, reducing false positives.
• Lead Executive Incident Governance & Postmortems: manage major incidents and translate metrics into executive dashboards for leadership.
• Manage & Develop SecOps Teams: allocate resources and budget; foster a high-performing security culture.

Skills

SecOps Leadership

SIEM & SOAR mastery

Threat Modeling

Executive communication

Cloud security

Tools

SIEM

SOAR

EDR

CI/CD telemetry

Job description

Everpure is seeking a Senior Manager of Security Operations to lead Detection Engineering and CIDR teams globally. You will shape proactive, intelligence-driven defense across cloud, SaaS, and endpoints, partnering with GRC, Infra, Product Security, and Engineering to set objectives and incident response strategies.

The role emphasizes MITRE ATT&CK alignment, automated detection, SIEM/SOAR pipelines, and executive dashboards.