Job Closed
This listing is no longer active.
You see a card. We see endless possibilities.™
Manager, Security Operations
Location
United States
Posted
127 days ago
Salary
$177.6K - $261.2K / year
Seniority
Lead
Job Description
Manager, Security Operations
Marqeta
• Direct the functions, processes, and operations of the security operations team SOC and ensure policies and procedures are followed. • Lead the security operations team to ensure optimal identification / resolution of security incidents and enhance security. • Ensure SLA compliances, process adherence, process improvement to meet operational objectives. • Manage the collection, documentation and research of security incidents and investigations. • Provide Senior Management with a realistic overview of risks and threats in the Marqeta environment. • Continuous development and maintenance of the incident response management program which includes incident detection, analysis, containment, eradication, recovery and chain of evidence / forensic artifacts. • Ability to work directly with all levels of Marqeta employees (Executive, Senior management, SMEs.) • Create and maintain reports, dashboards, and metrics of security operations for regular reporting and presentation to management. • Manage the process improvement program for security operations processes. • Conduct scheduled and ad hoc training exercises to ensure staff are current with the latest threats and incident response techniques. • Provide direction, leadership and management of security operations personnel. • Create a high-performing team culture where team members are supported, standards are consistently upheld, people are treated with respect, and everyone feels a sense of belonging. • Manage cross-functional response with Fraud and Risk for cyberfraud activities • Lead best practices for detection engineering lifecycles collaboratively with the detection engineering team, ensuring high quality metrics around alert quality and optimization • Lead development of security playbooks for incident response and collaborate on security automation strategy with detection engineering • Develop and maintain modern threat intelligence program • Leverage modern AI/ML tools as a force multiplier
Job Requirements
- 5+ Years experience in security operations
- 2+ years experience of managing security operations and incident response.
- Experience with security tools such as XSOAR, Crowdstrike, Tenable, AWS Security Hub, GuardDuty, SIEM tooling, etc
- Expertise and experience in security operational services: logging and monitoring unified threat management, EDR, DDOS / DOS, threat management, cyber investigations, and cyber security forensic investigations.
- Experience managing on-call rotations and escalation frameworks
- Experience with PCI, payments and cyber-fraud preferred
- Experience with leveraging AI/ML in security operations preferred
- Advanced knowledge of best practice standards and procedures regarding information systems applications security, data security, and infrastructure security.
- Experience in cloud technology, especially AWS.
- Strong knowledge of networking and security fundamentals.
- Must have excellent writing and communication skills.
- Experience in executive-level reporting.
- Excellent communication and interpersonal skills, with the ability to cultivate relationships across teams, influence decision-making, and collaborate with stakeholders at all levels of the organization.
- BS degree or relevant experience.
- Relevant certifications (CISSP, CISA, CISM, GCIH, Security+, etc)
Benefits
- Multiple health insurance options
- Flexible time off – take what you need
- Retirement savings program with company contribution and after tax contributions
- Equity in a publicly-traded company and an Employee Stock Purchase Program
- Family-forming benefits, fertility support, and up to 20 weeks of Parental Leave
- Free therapy sessions, financial and professional coaching, and legal advice
- Monthly stipend to support our remote work model
- Annual “development dollars” to support our people growth and development
- Through Flex First, the freedom to live and work wherever you and your family thrive
Related Guides
Related Categories
Related Job Pages
More Security Operations Jobs
• Serve as a primary responder for AFC customer systems, taking ownership of client configuration issues and tracking through resolution. • Act as a point of escalation for junior level Engineers and provide guidance and mentoring. • Advise best practice on SIEM/MDR/SOAR products to both technical and relatively non-technical personnel. • Provide remote consulting services via interactive client sessions to assist with implementation of multiple product vendors and technologies. • Implement and configure SIEM/MDR/SOAR software and appliance-based products in large enterprise and Government environments. • Develop and maintain security content and reporting. • Perform knowledge transfers to clients regarding security and system configuration awareness.
Security Operations Analyst
Climb Channel Solutions NAA different breed of specialty technology distributor. #ClimbWithUs
• Monitor Delinea security platforms to identify, investigate, and respond to security events. • Lead cross-functional response coordination for security incidents. • Develop, design, and implement security operations enhancements to reduce risk. • Work with other business areas to enhance security and provide security awareness. • Research, evaluate, and implement security products and services as directed by security management.
Security Operations Center Architect
accesa.euThe place where creative problem-solvers that care for people, solutions, and their impact thrive
• Architect the Modern SOC → Lead the end-to-end design of a cloud-native SOC, defining the strategy, Azure technical architecture, and operational model aligned with Zero Trust and business needs. • Translate Risk into Detection → Convert abstract security strategies and business risks into actionable detection logic by designing and maintaining advanced analytics rules using KQL in Microsoft Sentinel. • Optimize Security at Scale → Design cost-efficient ingestion and retention strategies, including Log Tiering (Analytics, Basic, Archive), balancing visibility, performance, and Azure ingestion costs. • Engineer SIEM & XDR Integrations → Architect seamless integrations between Microsoft Sentinel and the Microsoft Defender XDR suite (MDE, MDI, MDA, MDO), enabling bi-directional synchronization and enriched incidents. • Automate Response & Operations → Design and implement advanced SOAR playbooks using Azure Logic Apps or Power Automate to automate incident enrichment, response, and containment actions. • Enable Operational Excellence → Define SOC workflows, incident response processes, health monitoring, and KPI visualization (MTTD, MTTR, FPR), while mentoring Tier 3 analysts and ensuring sustainable operations.
• Act as the primary technical escalation point for complex operational issues, ensuring quick and effective resolutions. • Maintain and optimize critical systems, including SIEM platforms (e.g., Splunk, ELK, SumoLogic, Sentinel), Anti-Virus tools (Trend Micro Deep Security Manager, Microsoft Defender, Crowdstrike) and vulnerability management tools (e.g., Nessus, Qualys, Burp). • Monitor and improve the team’s use of automation and monitoring tools to drive operational efficiency. • Analyze and resolve system performance issues, ensuring compliance with security and operational standards. • Participate in incident response and post-mortem analysis to identify root causes and prevent recurrence. • Mentor and support the professional growth of engineers through training, feedback, and career development planning. • Assist with hiring, onboarding, and retention to ensure team stability and growth. • Oversee day-to-day delivery of security services, ensuring operational consistency and high-quality outcomes. • Track and optimize key metrics such as incident response times, operational efficiency, and compliance posture. • Develop and refine processes for incident response, vulnerability remediation, and compliance reporting. • Work with cross-functional teams, including consulting teams, SREs, and professional services teams, to improve service delivery.
