Security & Threat Operations Leader

DriveWealth; United States; Hybrid; USD 200,000 - 250,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Disability insurance

Paid Parental Leave

Wellness reimbursement

Company phone

Personal development allowance

Generous PTO and holidays

Job summary

DriveWealth seeks a Security & Threat Operations Manager to build and mature the function protecting our brokerage platform and corporate environment. You will lead the team, define its operating model, and deliver improvements in threat detection, incident response, and exposure management across AWS and Kubernetes environments.

You will act as Incident Commander during significant security incidents, coordinating with Engineering, DevOps, Product, and Legal to evolve defenses while maintaining

Qualifications

• 10+ years in security operations, detection engineering, incident response, or related disciplines.
• 3+ years leading technical teams and building/maturing an operations function.
• Experience as Incident Commander during significant security incidents.
• Strong hands-on expertise in threat intelligence, detection content development, and defensive validation.

Responsibilities

• Mature Security & Threat Operations through a measurable roadmap and operating model.
• Lead detection engineering, monitoring, and incident response.
• Own incident response lifecycle as Incident Commander and coordinate across teams.
• Manage exposure and control operations, including DLP, WAF, and email filtering.
• Partner with Legal, Compliance, and Security to meet regulatory requirements.

Skills

Incident Commander leadership

Threat intelligence

SIEM & endpoint analytics

Detection content development

Python/SQL scripting

AWS & Kubernetes

DLP & WAF

Regulatory compliance (SEC/FINRA)

Education

Bachelor’s degree in a related field

CISSP / GCIA / GCFA or equivalent

Tools

SIEM tools

Job description

DriveWealth seeks a Security & Threat Operations Manager to build and mature the function protecting our brokerage platform and corporate environment. You will lead the team, define its operating model, and deliver improvements in threat detection, incident response, and exposure management across AWS and Kubernetes environments.

You will act as Incident Commander during significant security incidents, coordinating with Engineering, DevOps, Product, and Legal to evolve defenses while maintaining