Manager, Security Operations Engineering
Description
We’re growing and looking to hire an Information Manager, Security Operations Engineering who embodies our core values: People First, Customer Obsession, Strive for Excellence, and Integrity.
Claroty is a global leader in cyber-physical systems (CPS) protection, dedicated to securing the critical infrastructure that keeps the world running. We’re a fast-growing, award-winning team where innovation meets purpose—and we want you to help us define the future of cybersecurity.
About the Role:
As the Information Security Operations Manager, you will lead our front-line defense, monitoring, and incident response capabilities. You will manage a high-performing technical team responsible for protecting enterprise infrastructure, cloud environments, and emerging AI workloads.
This role requires a rare combination of deeply technical hands-on capability and sophisticated leadership. Beyond managing technical systems and engineering staff, you will serve as the core liaison between Security Operations (SecOps) and key business stakeholders—including software engineering, corporate legal, human resources, and executive leadership—to navigate complex incidents, manage risk, and foster a collaborative security culture.
Requirements:
As a Manager, Security Operations Engineering, Your impact will be:
Technical & Architecture Ownership
- Cloud Security Operations: Architect and operationalize security monitoring within multi-cloud environments (e.g., AWS, Azure, GCP), utilizing cloud-native security tools and cloud security posture management (CSPM) systems.
- EDR & Endpoint Protection: Experienced in managing and optimizing next-generation Endpoint Detection & Response (EDR/XDR) tooling across enterprise servers and workstation fleets.
- Network Security: Knowledge of perimeter defenses, micro-segmentation, web-application firewalls (WAF), secure access service edge (SASE), and overall corporate network security architectures.
- AI Security Operations: Lead the operational monitoring and governance of enterprise AI/LLM integration, defending against emerging vectors such as prompt injection, data exfiltration through AI pipelines, and insecure API utilization.
- ZTNA: Experience with deploying, maintaining, and troubleshooting zero trust network access (ZTNA) solutions.
- Vulnerability Management: Oversees the continuous identification, prioritization, and remediation of security weaknesses across an organization’s infrastructure.
Incident Response & Security Analysis
- Manage day-to-day security analysis, monitoring, and full incident response lifecycles.
- Lead technical root-cause analysis investigations for complex security incidents and author polished post-mortem documentation for executive review.
- Mature the SecOps playbook, expanding capability around proactive threat hunting, threat intelligence integration, and digital forensics.
- Experience with SIEM (ex. Splunk) and Security Operations Center (SOC) monitoring and alerting using the latest technologies.
Team Leadership & Stakeholder Collaboration
- Team Management: Recruit, mentor, and build a technically proficient team of security analysts and engineers, ensuring continuous professional development and optimized on-call rotations.
- Developer & Engineering Relations: Partner closely with DevOps and software engineering teams to embed secure patterns into CI/CD pipelines, translating operational telemetry into clear, actionable code-fix requests without disrupting delivery velocity.
- Legal & Compliance Alignment: Coordinate directly with Corporate Legal and information security compliance teams to manage data privacy compliance, handle sensitive intellectual property matters, and provide forensic evidence for compliance or litigation.
- HR Collaboration: Partner with Human Resources to manage insider threat assessments, support sensitive personnel investigations, and automate employee lifecycle security workflows (onboarding/offboarding).