Senior Manager, Security Engineering & Operations

JD Power; United States; Remote; USD 160,000 - 200,000; Full time

Job summary

JD Power is seeking a Senior Manager, Security Engineering & Operations to lead the North America security engineering and operations function, overseeing vulnerability management, incident response, threat hunting, and hands-on security engineering.

You will establish managed vulnerability services, define SLAs, and scale the team from crisis response to proactive threat management and modernization. This role requires both operational discipline and technical credibility.

Qualifications

• 12+ years in security operations or engineering with hands-on technical depth.
• 7+ years managing security teams of 5+ engineers with coaching ability.
• Experience managing MSSP or managed vulnerability service engagements.

Responsibilities

• Lead and develop the Security Operations Engineer, Senior Security Engineer, and Security Engineers.
• Build high-performing teams and coaching culture.
• Establish vulnerability management program with partners, defining SLAs, tracking mechanisms, remediation governance, and executive reporting.
• Design and maintain enterprise incident response procedures, playbooks, escalation paths, and threat intelligence integration.
• Oversee 24x7 on‑call rotation, collaborate with HR/operations to improve sustainability and reduce burnout while preserving response quality.
• Manage the transition from crisis response mode to strategic engineering focus and modernization work.
• Develop KPIs for detection, response, and remediation; report quarterly to CISO on team metrics and program health.
• Lead hands‑on security engineering projects including infrastructure hardening, threat hunting, and controls validation.
• Interface with Cloud Platform, Infrastructure, and Development teams to embed security into engineering practices.
• Mentor team on automation, scripting, and process improvement to reduce manual toil.

Skills

Security operations leadership

Security engineering

Incident response

Vulnerability management

MSSP management

Team coaching

Automation & scripting

Cloud security

Threat hunting

Executive reporting

SLAs & governance

Security metrics

Tools

SIEM

Nessus

Qualys

Job description

Job Title

Senior Manager, Security Engineering & Operations

Location

Remote | USA, Canada

Reports to

Chief Information Security Officer

Employment Type

Full-time

This is a new vacancy

About the Role

The Senior Manager will lead a combined Security Engineering and Operations function for North America, overseeing vulnerability management, incident response, threat hunting, and hands‑on security engineering. You will establish the managed vulnerability service engagement, define SLAs and remediation processes, and scale the team from unsustainable crisis‑mode incident response to proactive threat management and strategic engineering. This role requires both operational discipline and technical credibility.

In this role, you will:

• Lead and develop the Security Operations Engineer, Senior Security Engineer, and Security Engineers;


• build high‑performing teams and coaching culture


• Establish vulnerability management program with our partners, defining SLAs, tracking mechanisms, remediation governance, and executive reporting


• Design and maintain enterprise incident response procedures, playbooks, escalation paths, and threat intelligence integration


• Oversee 24x7 on‑call rotation, work with HR and operations to improve sustainability, and reduce burnout while maintaining response quality


• Manage the transition from crisis response mode) to strategic engineering focus and modernization work


• Develop KPIs for detection, response, and remediation; report quarterly to CISO on team metrics and program health


• Lead hands‑on security engineering projects including infrastructure hardening, threat hunting, and controls validation


• Interface with Cloud Platform, Infrastructure, and Development teams to embed security into engineering practices


• Mentor team on automation, scripting, and process improvement to reduce manual toil

Required Qualifications

• 12+ years in security operations, incident response, or security engineering roles with hands‑on technical depth


• 7+ years managing security teams of 5+ engineers with demonstrated team development and coaching ability


• Hands‑on experience with SIEM, vulnerability scanning, remediation tracking, and detection rule development


• Proven track record transitioning teams from reactive incident response to proactive threat hunting and engineering


• Experience managing managed security service provider (MSSP) or managed vulnerability service engagements


• Strong leadership ability; commitment to team development, sustainability, and psychological safety

Preferred Qualifications

• CISSP, CISM, or CEH certification


• Experience with Nessus, Qualys, or similar vulnerability management platforms


• Background in incident response program maturity, metrics, and automation


• Experience scaling security operations in growth‑stage organizations

Compensation and Benefits

This position has a starting salary range of $130,000 - $170,000 CAD / $160,000 - $200,000 USD per year. The range represents what we reasonably and in good faith expect to pay for the role at the time of posting. An employee’s pay within the range is determined by a number of factors, including relevant skills, education, qualifications, experience, performance, business or organizational needs, and geographic location.

• Eligible employees may participate in medical, dental, vision, disability, life insurance, retirement savings programs, paid time off, wellness programs, and other company‑sponsored benefits.


• Benefits vary by country and employment status.

Why Join JD Power

JD Power powers auto‑related decisions through proprietary data, advanced analytics, deep industry expertise, and workflows that connect insight to action. Operating across North America, Europe, and Australia, we help customers make better decisions and achieve better outcomes. As a virtual‑first company, we offer flexible work arrangements, opportunities for learning and development, and a culture centered on the Values that guide how we work every day.

• We power our customers’ success. Everything we do is focused on helping customers make better decisions and achieve better outcomes.


• We are innovative, collaborative, and grounded in data. We combine advanced analytics with human expertise to deliver insight that holds up in the real world.


• We make things easy. We turn complexity into clarity so teams can act faster and with confidence.


• We get it done. We focus on execution, accountability, and results.


• We start with trust and prove it every day. Independence, integrity, and credibility are the foundation of our work.

Equal Opportunity & Accommodations

JD Power is committed to employing a diverse workforce. Qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, gender expression, veteran status, or disability. JD Power is committed to providing reasonable accommodations throughout the recruitment process for individuals with disabilities or other protected needs under applicable local laws. Please contact [e-mail] for accommodation request.

Data Privacy

JD Power does not disclose your personal data to unauthorized third parties. However, as a global corporation consisting of multiple affiliated companies in various countries, JD Power has international sites and JD Power uses resources located throughout the world. JD Power may from time to time also use third parties to act on JD Power’s behalf. You agree to the fact that to the extent necessary your personal data may be transferred and/or disclosed to any company within JD Power group of companies as well as to third parties acting on JD Power’s behalf, including also transfers to servers and databases outside the country where you provided JD Power with your personal data. Such transfers may include for example transfers and/or disclosures outside the European Economic Area and in the United States of America. If you are a California or United Kingdom resident, additional disclosures about the information we collect and how we use that information can be found by clicking here.

Applications

Candidates must be legally authorized to work in the country where employment is offered. JD Power does not provide employment sponsorship for this position. This position is posted exclusively on https://www.jdpower.com/business/careers and select trusted job boards such as LinkedIn or Indeed. All official communication comes from email addresses ending in @jdpower.com or @jdpa.com. We will never ask for payment, equipment purchases, or upfront fees.We may take additional steps to verify candidate information to protect the integrity of our recruitment process. To all recruitment agencies: JD Power does not accept unsolicited agency resumes and we are not responsible for any fees related to unsolicited resumes.

Welcome to JD Power Careers! JD Power is a proven leader in business‑critical data and intelligence to drive auto‑related decisions with confidence and clarity. By leveraging unmatched proprietary data, advanced analytics and deep industry expertise, JD Power fuels original equipment manufacturers, retailers, lenders, insurers and partners to enhance their performance. Since 1968, JD Power has delivered incisive guidance and intelligence about customer interactions with brands and products. To learn more about the company, visit JDPower.com.