Senior Manager, Security Engineering & Operations

J.D. Power; Michigan; Remote; USD 130,000 - 200,000; Full time

Job summary

JD Power seeks a Senior Manager, Security Engineering & Operations to lead North American security engineering and operations. This remote role reports to the CISO and oversees vulnerability management, incident response, threat hunting, and security engineering across the organization.

You will scale the team, establish SLAs, and drive proactive security maturity. The role requires 12+ years in security, 7+ years in leadership of 5+ engineers, hands-on SIEM and vulnerability platforms, and a

Qualifications

• 12+ years in security operations, incident response, or engineering.
• 7+ years leading security teams of 5+ engineers.
• Hands-on with SIEM, vulnerability scanning, remediation tracking & detection rules.
• Proven track record moving teams from crisis response to proactive threat management.
• Experience managing MSSP or managed vulnerability service engagements.
• Strong leadership, focus on sustainability, and psychological safety.

Responsibilities

• Lead Security Operations Engineer, Senior Security Engineer, and Security Engineers; build high-performing teams.
• Establish vulnerability management program with partners; define SLAs and remediation governance.
• Design and maintain incident response playbooks, escalation paths, and threat intel integration.
• Oversee 24x7 on-call rotation and improve sustainability while preserving response quality.
• Transition from crisis response to strategic engineering and modernization of security posture.
• Develop KPIs for detection, response, and remediation; report health to CISO quarterly.
• Lead hands-on security projects: infrastructure hardening, threat hunting, and controls validation.
• Embed security into engineering by partnering with Cloud, Infrastructure, and Development teams.
• Mentor team on automation and scripting to reduce manual toil.

Skills

Security operations

Incident response management

Team leadership

Vulnerability management

MSSP management

Threat hunting

Automation & scripting

Education

Bachelor's degree in CS/IT or related field

Tools

SIEM

Nessus

Qualys

Job description

Job Description:

Job Title: Senior Manager, Security Engineering & Operations

Location:Remote | USA, Canada

Reports to: Chief Information Security Officer

Employment Type: Full-time

This is a new vacancy

About the Role:

The Senior Manager will lead a combined Security Engineering and Operations function for North America, overseeing vulnerability management, incident response, threat hunting, and hands-on security engineering. You will establish the managed vulnerability service engagement, define SLAs and remediation processes, and scale the team from unsustainable crisis-mode incident response to proactive threat management and strategic engineering. This role requires both operational discipline and technical credibility.

In this role, you will:

• Lead and develop the Security Operations Engineer, Senior Security Engineer, and Security Engineers; build high-performing teams and coaching culture
• Establish vulnerability management program with our partners, defining SLAs, tracking mechanisms, remediation governance, and executive reporting
• Design and maintain enterprise incident response procedures, playbooks, escalation paths, and threat intelligence integration
• Oversee 24x7 on-call rotation, work with HR and operations to improve sustainability, and reduce burnout while maintaining response quality
• Manage the transition from crisis response mode to strategic engineering focus and modernization work
• Develop KPIs for detection, response, and remediation; report quarterly to CISO on team metrics and program health
• Lead hands-on security engineering projects including infrastructure hardening, threat hunting, and controls validation
• Interface with Cloud Platform, Infrastructure, and Development teams to embed security into engineering practices
• Mentor team on automation, scripting, and process improvement to reduce manual toil

Required Qualifications:

• 12+ years in security operations, incident response, or security engineering roles with hands-on technical depth
• 7+ years managing security teams of 5+ engineers with demonstrated team development and coaching ability
• Hands-on experience with SIEM, vulnerability scanning, remediation tracking, and detection rule development
• Proven track record transitioning teams from reactive incident response to proactive threat hunting and engineering
• Experience managing managed security service provider (MSSP) or managed vulnerability service engagements
• Strong leadership ability; commitment to team development, sustainability, and psychological safety

Preferred Qualifications:

• CISSP, CISM, or CEH certification
• Experience with Nessus, Qualys, or similar vulnerability management platforms
• Background in incident response program maturity, metrics, and automation
• Experience scaling security operations in growth-stage organizations

Compensation and Benefits

This position has a starting salary range of $130,000 - $170,000 CAD / $160,000 - $200,000 USD per year. The range represents what we reasonably and in good faith expect to pay for the role at the time of posting. An employee's pay within the range is determined by a number of factors, including relevant skills, education, qualifications, experience, performance, business or organizational needs, and geographic location.

Eligible employees may participate in medical, dental, vision, disability, life insurance, retirement savings programs, paid time off, wellness programs, and other company-sponsored benefits. Benefits vary by country and employment status.

Why Join JD Power

JD Power powers auto-related decisions through proprietary data, advanced analytics, deep industry expertise, and workflows that connect insight to action. Operating across North America, Europe, and Australia, we help customers make better decisions and achieve better outcomes.

As a virtual-first company, we offer flexible work arrangements, opportunities for learning and development, and a culture centered on the Values that guide how we work every day.

• We power our customers' success. Everything we do is focused on helping customers make better decisions and achieve better outcomes.
• We are innovative, collaborative, and grounded in data. We combine advanced analytics with human expertise to deliver insight that holds up in the real world.
• We make things easy. We turn complexity into clarity so teams can act faster and with confidence.
• We get it done. We focus on execution, accountability, and results.
• We start with trust and prove it every day. Independence, integrity, and credibility are the foundation of our work.

Equal Opportunity & Accommodations

JD Power is committed to employing a diverse workforce. Qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, gender expression, veteran status, or disability.

JD Power is committed to providing reasonable accommodations throughout the recruitment process for individuals with disabilities or other protected needs under applicable local laws. Please contact [e-mail] for accommodation request.

Data Privacy

JD Power does not disclose your personal data to unauthorized third parties. However, as a global corporation consisting of multiple affiliated companiesin various countries, JD Power has international sites and JD Power uses resources located throughout the world. JD Power may from time to time also use third parties to act on JD Power's behalf. You agree to the fact that to the extent necessary yourpersonal data may be transferred and/or disclosed to any company within JD Power group of companies as well as to third parties acting on JD Power's behalf, including also transfers to servers and databases outside the country where you provided JD Powerwith your personal data. Such transfers may include for example transfers and/or disclosures outside the European Economic Area and in the United States of America. If you are a California or United Kingdom resident, additional disclosures about the information we collect and how we use that information can be found by clicking here.

Applications

Candidates must be legally authorized to work in the country where employment is offered. JD Power does not provide employment sponsorship for this position.

This position is posted exclusively on https://www.jdpower.com/business/careers and select trusted job boards such as LinkedIn or Indeed. All official communication comes from email addresses ending in @jdpower.com or @jdpa.com. We will never ask for payment, equipment purchases, or upfront fees.We may take additional steps to verify candidate information to protect the integrity of our recruitment process.

To all recruitment agencies: JD Power does not accept unsolicited agency resumes and we are not responsible for any fees related to unsolicited resumes.