Senior Product Manager (Security Operations)

Equinix; Town of Texas, Fort Worth (WI, TX); In loco; USD 120.000 - 150.000; Tempo pieno

Descrizione del lavoro

Equinix is seeking a Product Manager, SecOps to drive the strategy, roadmap, and adoption of security capabilities embedded in our engineering ecosystem.

This role focuses on scalable security, automation, and measurable outcomes, collaborating with security engineering, monitoring, incidence management, and threat intelligence teams to ensure production-ready, governed capabilities with clear owner responsibilities.

Competenze

• Strong written and verbal communication skills.
• Experience as a Product Manager owning cross-functional delivery in a complex technical environment.
• Experience building processes, KPIs, and operating cadences in environments where teams depend on one another for outcomes.
• Strong understanding of Security Operations concepts, including SIEM, detection engineering, incident response, case management, and security automation.
• Ability to translate technical platform work into clear user value, measurable outcomes, and release criteria.
• Comfort working with ambiguity and turning loosely defined needs into clear plans and decisions.
• Experience prioritizing roadmaps and backlogs across multiple stakeholder groups with competing demands.
• Experience supporting or partnering closely with Security Operations Center, incident response, or threat detection teams.
• Familiarity with security telemetry pipelines, data normalization, and log onboarding workflows.
• Understanding of response automation design, control frameworks, and approval models for high-impact actions.
• Exposure to detection engineering practices such as rule testing, content lifecycle management, and detection-as-code.
• Experience with SIEM and SOAR platforms such as Google SecOps, Chronicle, Splunk, Microsoft Sentinel, Palo Alto XSIAM, or similar technologies.
• Experience using data to evaluate false positives, alert quality, operational throughput, and workflow adoption.
• Knowledge of common security frameworks and operating models such as NIST incident response guidance.

Mansioni

• Own and maintain the SecOps product roadmap across shared engineering and operations priorities.
• Partner with leaders in detection engineering, monitoring and response, incident management, and threat intelligence to define quarterly objectives.
• Facilitate prioritization decisions for detections, log sources, automations, integrations, and workflow improvements.
• Define launch criteria for new security content and capabilities, including documentation, training, support model, and success measures.
• Run structured intake and triage for stakeholder requests and convert them into a clear, ranked backlog.
• Lead cross-functional reviews to resolve delivery blockers, unclear ownership, and handoff gaps.
• Develop metrics that show whether new capabilities are improving response speed, alert quality, coverage, and analyst efficiency.
• Document requirements, business value, user workflows, acceptance criteria, and rollout plans.
• Represent operational needs in platform discussions and represent engineering realities in operational planning.
• Drive continuous improvement based on analyst feedback, incident learnings, and evolving threat priorities.

Conoscenze

Communication skills

Cross-functional delivery

KPIs & cadence

Security Ops concepts

Detection engineering

Incident response

Security automation

Roadmap prioritization

Stakeholder management

Ambiguity tolerance

Strumenti

Splunk

Chronicle

Microsoft Sentinel

Palo Alto XSIAM

Google SecOps

Descrizione del lavoro

• We are looking for a Product Manager, SecOps to lead the strategy, roadmap, and adoption of security capabilities embedded directly into our engineering ecosystem
• This is not a policy-writing or governance role. It is a product role focused on making security scalable, automated, developer-friendly, and measurable
• Security Operations depends on tight coordination between the teams that build and manage security capabilities and the teams that use those capabilities to detect and respond to threats
• This Product Manager role creates a single product owner for that boundary, ensuring detections, automation, telemetry onboarding, and platform changes are production-ready, governed, measurable, and adopted by analysts and responders
• End-to-end detection lifecycle: Drive the process from threat-informed idea generation through rule development, testing, deployment, tuning, analyst adoption, and retirement
• SecOps backlog prioritization: Maintain and prioritize a shared roadmap across telemetry onboarding, detection content, SOAR playbooks, analyst workflows, and platform enhancements
• Operational readiness: Ensure new capabilities launch with runbooks, ownership, success criteria, training, support processes, documentation, and release criteria
• Cross-team process improvement: Identify and reduce friction in handoffs between engineering and operations, resolving delivery blockers and unclear ownership
• Platform value realization: Translate security platform capabilities into measurable outcomes, including improved alert quality, faster response, broader telemetry coverage, and higher automation effectiveness
• Stakeholder alignment: Create clear decision-making forums and communication rhythms across security engineering, monitoring and response, incident management, and threat intelligence
• Key areas of focus:
• Detection and rule lifecycle: Own the product process for how detections move from concept to value, including intake, prioritization, test standards, analyst validation, tuning, coverage review, readiness criteria, handoff quality, false-positive trends, alert fidelity, and lifecycle decisions
• Telemetry and log onboarding strategy: Prioritize log sources, parser improvements, and schema normalization based on risk, coverage gaps, investigative value, analyst needs, concrete use cases, dependencies, sequencing, and effort tradeoffs
• SOAR and automation governance: Scale automation safely by improving how ideas are submitted, reviewed, built, tested, approved, and adopted; clarify ownership, controls, approvals, adoption measures, success rates, analyst time savings, and failure patterns
• Platform roadmap and feature adoption: Partner with technical leaders to shape adoption of SIEM, SOAR, and AI-assisted operational capabilities, including rollout plans, operational testing, enablement, success metrics, detection-as-code, composite detections, and standardized content management
• Metrics, reporting, and operating cadence: Define KPIs, health dashboards, and recurring reviews for detection quality, onboarding throughput, automation effectiveness, operational readiness, roadmap priorities, launch readiness, and post-launch performance
• What you’ll do:
• Own and maintain the SecOps product roadmap across shared engineering and operations priorities
• Partner with leaders in detection engineering, monitoring and response, incident management, and threat intelligence to define quarterly objectives
• Facilitate prioritization decisions for detections, log sources, automations, integrations, and workflow improvements
• Define launch criteria for new security content and capabilities, including documentation, training, support model, and success measures
• Run structured intake and triage for stakeholder requests and convert them into a clear, ranked backlog
• Lead cross-functional reviews to resolve delivery blockers, unclear ownership, and handoff gaps
• Develop metrics that show whether new capabilities are improving response speed, alert quality, coverage, and analyst efficiency
• Document requirements, business value, user workflows, acceptance criteria, and rollout plans
• Represent operational needs in platform discussions and represent engineering realities in operational planning
• Drive continuous improvement based on analyst feedback, incident learnings, and evolving threat priorities

Strong written and verbal communication skills, including the ability to work effectively with engineers, analysts, managers, and executivesExperience as a Product Manager owning cross-functional delivery in a complex technical environmentExperience building processes, KPIs, and operating cadences in environments where teams depend on one another for outcomesStrong understanding of Security Operations concepts, including SIEM, detection engineering, incident response, case management, and security automationAbility to translate technical platform work into clear user value, measurable outcomes, and release criteriaComfort working with ambiguity and turning loosely defined needs into clear plans and decisions.Experience prioritizing roadmaps and backlogs across multiple stakeholder groups with competing demandsExperience supporting or partnering closely with Security Operations Center, incident response, or threat detection teamsFamiliarity with security telemetry pipelines, data normalization, and log onboarding workflowsUnderstanding of response automation design, control frameworks, and approval models for high-impact actionsExposure to detection engineering practices such as rule testing, content lifecycle management, and detection-as-codeExperience with SIEM and SOAR platforms such as Google SecOps, Chronicle, Splunk, Microsoft Sentinel, Palo Alto XSIAM, or similar technologiesExperience using data to evaluate false positives, alert quality, operational throughput, and workflow adoptionKnowledge of common security frameworks and operating models such as NIST incident response guidance