JOIN US IN BUILDING THE FUTURE OF FINANCE.

Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in

the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic

cultural and financial shift, keep reading.

ABOUT THE TEAM + ROLE

We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold

thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where

ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of

everything we do. Expectations are high, and so are the rewards.

The Security Operations (SecOps) team protects Robinhood and its customers by detecting, investigating, and responding to security

threats across our production systems, endpoints, and cloud environments. We combine detection engineering, incident response, and

threat intelligence to identify emerging risks, strengthen our defenses, and reduce the impact of attacks before they reach our

customers. As we continue to evolve our security platform, we're embracing AI and automation to help our teams move faster,

uncover threats more effectively, and scale our defenses against increasingly sophisticated adversaries.

As the Manager of Response, Automation, Intelligence and Detection Engineering (RAID) within SecOps, you will lead teams across

North America, shaping the strategy, execution, and long term evolution of our defensive security capabilities. You'll be

responsible for building high performing teams, maturing our detection and incident response programs, and ensuring we stay ahead

of an increasingly sophisticated threat landscape. Working closely with Security, Engineering, Infrastructure, and Trust & Safety,

you'll translate emerging threats into scalable defenses while championing the use of AI, automation, and modern engineering

practices to transform how we detect, investigate, and respond to security events. This is a highly visible leadership role where

your decisions will directly influence Robinhood's security posture and help protect millions of customers.

This role is based in our Menlo Park, CA or Denver, CO office(s), with in-person attendance expected at least 5 days per week.

At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our

office experience is intentional, energizing, and designed to fully support high-performing teams.

Applications for this role will be accepted through July 31, 2026. Please connect with your recruiter for more information about

this role’s application window.

WHAT YOU’LL DO

Lead the Detection & Response and Threat Intelligence organizations across North America, setting the technical vision,

organizational strategy, and execution priorities for both teams.

Mature Robinhood's detection and incident response capabilities by improving detection coverage, response workflows,

operational readiness, and measurable security outcomes.

Define and track operational metrics such as detection coverage, response time, investigation quality, and control

effectiveness, using data to continuously improve team performance.

Lead security incident response for high-severity events, serving as an Incident Commander when needed and ensuring thorough

post-incident reviews that drive lasting improvements.

Partner with Security Engineering, Infrastructure, Product Security, Trust & Safety, and Engineering leaders to translate

emerging threats into scalable detection, response, and prevention capabilities.

Drive adoption of automation, AI, and modern engineering practices to improve analyst productivity, accelerate investigations,

and scale security operations.

Contribute to long-term security strategy, annual planning, budgeting, and organizational design as the Detection & Response

program continues to grow.

WHAT YOU BRING

8+ years of experience in security operations, incident response, detection engineering, threat intelligence, or a closely

related security discipline.

4+ years of experience leading high-performing security engineering or security operations teams, including hiring, coaching,

and organizational development.

Demonstrated experience building and scaling detection and response programs, including incident response, detection

engineering, operational processes, and security metrics.

Experience leading high-severity security incidents and coordinating cross-functional response efforts involving engineering,

communications, legal, and executive stakeholders.

Strong technical foundation across modern cloud environments, endpoint security, identity systems, SIEM, EDR, and detection

engineering practices, with the ability to provide technical leadership without needing to be the primary implementer.

Experience applying automation, AI, or software engineering practices to improve the scale and effectiveness of security

operations.

Excellent communication and stakeholder management skills, with the ability to influence engineering leaders and clearly

communicate technical risk to executive audiences.

Demonstrated ability to balance strategic planning with operational execution in a fast-paced, high-growth environment.

LEADERSHIP EXPECTATIONS

Our ambitious roadmap requires a great culture shaped by exceptional leaders. Here’s what we expect from them:

Drive high performance by setting clear, focused goals, giving real-time feedback, stretching top talent, and scaling impact

through focus, innovation, and tech.

Hire and retain top talent by setting a high bar, hiring only those who raise it, investing in onboarding, and addressing

talent issues quickly and fairly.

Create community by connecting work to purpose, removing friction while prioritizing safety, building trust and inclusion, and

leading from the front with integrity.

WHAT WE OFFER

Challenging, high-impact work to grow your career.
Performance-driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching.
Best-in-class benefits to fuel your work, including 100% paid health insurance for employees with 90% coverage for dependents.
Lifestyle wallet — a highly flexible benefits spending account for wellness, learning, and more.
Employer-paid life & disability insurance, fertility benefits, and mental health benefits.
Time off to recharge including company holidays, paid time off, sick time, parental leave, and more!
Exceptional office experience with catered meals, events, and comfortable workspaces.

In addition to the base pay range listed below, this role is also eligible for bonus opportunities + equity + benefits.

Base pay for the successful applicant will depend on a variety of job-related factors, which may include education, training,

experience, location, business needs, or market demands. The expected base pay range for this role is based on the location where

the work will be performed and is aligned to one of 3 compensation zones. For other locations not listed, compensation can be

discussed with your recruiter during the interview process.

Base Pay Range:

Zone 1 (Menlo Park, CA; New York, NY; Bellevue, WA; Washington, DC)

$217,000—$255,000 USD

Zone 2 (Denver, CO; Westlake, TX; Chicago, IL)

$190,000—$224,000 USD

Zone 3 (Lake Mary, FL; Clearwater, FL; Gainesville, FL)

$169,000—$199,000 USD

Click here to learn more about our Total Rewards, which vary by region and entity.

If our mission energizes you and you’re ready to build the future of finance, we look forward to seeing your application.

Robinhood provides equal opportunity for all applicants, offers reasonable accommodations upon request, and complies with

applicable equal employment and privacy laws. Inclusion is built into how we hire and work—welcoming different backgrounds,

perspectives, and experiences so everyone can do their best. Please review the Privacy Policy for your country of application.

Roll

Manager of Response, Automation, Intelligence & Detection Engineering

Kategori

Security Division

Plats

Denver

Publicerad

12 juli

Sista ansökningsdag

17 augusti

Källa

Arbetsgivarens hemsida

Taggar för det här jobbet

Security Division

Liknande jobb

Manager, Security Operations

Figma•San Francisco

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! Figma's Security team is growing, and we're looking for a Security Operations Manager to lead the strategy and execution of our security operations program. In this role, you'll build and scale the systems, processes, and tooling that help protect Figma and our community. You'll partner closely with Security Engineering, Platform Security, IT, GRC, and Legal to strengthen our detection and response capabilities, improve operational resilience, and help shape the future of our DART and SOC functions. This is a full time role that can be held from one of our US hubs or remotely in the United States. WHAT YOU'LL DO AT FIGMA: * Own Figma's security monitoring and incident response program, from detection engineering through post-incident review and continuous improvement * Build and automate security operations workflows, including alert triage, enrichment, investigation, and response actions using SOAR and custom tooling * Develop and maintain incident response run books, escalation procedures, and communication plans for security events of varying severity * Lead incident response preparedness initiatives, including tabletop exercises, red team engagements, and response capability assessments * Improve the effectiveness of our SIEM and SOAR platforms by reducing noise, increasing signal fidelity, and closing detection coverage gaps * Build and operationalize threat intelligence capabilities to identify adversary behaviors, prioritize investments, and strengthen detection and response programs * Partner with Legal, Privacy, and Communications teams to support breach notification and regulatory response obligations during significant security incidents * Drive security operations strategy through vendor management, operational metrics, and cross-functional initiatives spanning IAM, vulnerability management, DLP, and exposure reduction WE'D LOVE TO HEAR FROM YOU IF YOU HAVE: * 7+ years of experience in security operations, incident response, or a related security engineering function * Hands-on experience building and automating detection and response workflows using scripting, APIs, or security automation platforms * Deep expertise with SIEM and SOAR technologies in a cloud-native or SaaS environment * Demonstrated success building, scaling, or significantly improving a detection and response program * Experience leading complex security incidents and partnering with Legal, Privacy, and business stakeholders during high-impact events WHILE IT'S NOT REQUIRED, IT'S AN ADDED PLUS IF YOU ALSO HAVE: * Operated in a public company environment with SOX, ISO 27001, SOC 2, or FedRAMP requirements * Applied AI risk management frameworks such as NIST AI RMF, OECD AI Principles, or ISO 42001 * Utilized AI-powered tools to automate security operations workflows and improve team efficiency At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you’re excited about this role but your past experience doesn’t align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles. Pay Transparency Disclosure If based in Figma’s San Francisco or New York hub offices, this role has the annual base salary range stated below. Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. The listed range is a guideline, and the range for this role may be modified. For roles that are available to be filled remotely, the pay range is localized according to employee work location by a factor of between 80% and 100% of range. Please discuss your specific work location with your recruiter for more information. Figma offers equity to employees, as well a competitive package of additional benefits, including health, dental & vision, retirement with company contribution, parental leave & reproductive or family planning support, mental health & wellness benefits, generous PTO, company recharge days, a learning & development stipend, a work from home stipend, and cell phone reimbursement. Figma also offers sales incentive pay for most sales roles and an annual bonus plan for eligible non-sales roles. Figma’s compensation and benefits are subject to change and may be modified in the future. Annual Base Salary Range: $185,000—$296,000 USD At Figma we celebrate and support our differences. We know employing a team rich in diverse thoughts, experiences, and opinions allows our employees, our product and our community to flourish. Figma is an equal opportunity workplace - we are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to accommodations-ext@figma.com. These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities. Examples of accommodations include but are not limited to: * Holding interviews in an accessible location * Enabling closed captioning on video conferencing * Ensuring all written communication be compatible with screen readers * Changing the mode or format of interviews To ensure the integrity of our hiring process and facilitate a more personal connection, we require all candidates keep their cameras on during video interviews. Additionally, if hired you will be required to attend in person onboarding. By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with Figma's Candidate Privacy Notice.

Sista ansökan: 16 aug.Publicerad: 17 juli

Administration

Senior Manager, SIRT

Twitch•Irvine

ABOUT US Twitch is the world’s biggest live streaming service, with global communities built around gaming, entertainment, music, sports, cooking, and more. It is where thousands of communities come together for whatever, every day. We’re about community, inside and out. You’ll find coworkers who are eager to team up, collaborate, and smash (or elegantly solve) problems together. We’re on a quest to empower live communities, so if this sounds good to you, see what we’re up to on LinkedIn and X, and discover the projects we’re solving on our Blog. Be sure to explore our Interviewing Guide to learn how to ace our interview process. ABOUT THE ROLE As the SIRT Manager, you will lead Twitch's Security Incident Response Team, reporting to the VP of Security. You'll oversee a team responsible for detecting and handling security incidents, and be an advocate for lessons learned from incidents across Twitch. You bring expertise in threat intelligence, detection engineering, and incident response. Your team will work directly with affected teams to contain and learn from incidents. We encourage you to apply if you have a combination of the skills outlined below. You can work from San Francisco, CA; Irvine, CA or Seattle, WA! YOU WILL: * As SIRT Manager, you will initially participate in, and graduate to escalation for, an on-call rotation of your direct reports on the Incident Response Team * You will identify opportunities for automation to enhance your team's efficiency * You will qualify reports or alerts of activity as security incidents using clear guidelines that establish what constitutes a security incident * You will evaluate the potential and realized impact of security incidents to Twitch * You will communicate security incident details, impact assessments, and response actions to leadership and executive partners * You will foster a culture of learning and knowledge sharing within your team and across the organization YOU HAVE: * You have 5+ years managing a team of incident handlers and security engineers, or 2 years of management experience with at least 3 years of hands-on security incident response work * You have delivered security programs like network security monitoring, cloud security monitoring, incident response, threat hunting, or other reactive information security programs * Your approach to incident response is collaborative, not combative * You have automation experience using scripting or programming languages (Go, Python, Ruby, or Bash) * You have in-depth knowledge of internet security issues and the threat landscape * You have a background in cloud, host, network, and application security BONUS POINTS * Experience managing and mitigating high impact security risks on a global platform * Familiarity with Twitch PERKS * Medical, Dental, Vision & Disability Insurance * 401(k) * Maternity & Parental Leave * Flexible PTO * Amazon Employee Discount Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Pursuant to the Los Angeles Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Job ID: TW9234 The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits. US, WA, Seattle - Annually $175,100—$236,900 USD US, CA, San Francisco - Annually $201,300—$272,400 USD US, CA, Irvine - Annually $175,100—$236,900 USD Twitch is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Twitch values your privacy. Please consult our Candidate Privacy Notice, for information about how we collect, use, and disclose personal information of our candidates.

Sista ansökan: 17 aug.Publicerad: 18 juli

Platforms & Services

Security Operations Lead

Lendable•London

ABOUT LENDABLE Lendable is on a mission to build the world's best technology to help people get credit and save money. We're building one of the world’s leading fintech companies and are off to a strong start: * One of the UK’s newest unicorns with a team of just over 700 people * Among the fastest-growing tech companies in the UK * Profitable since 2017 * Backed by top investors including Balderton Capital and Goldman Sachs * Loved by customers with the best reviews in the market (4.9 across 10,000s of reviews on Trustpilot) So far, we’ve rebuilt the Big Three consumer finance products from scratch: loans, credit cards and car finance. We get money into our customers’ hands in minutes instead of days. We’re growing fast, and there’s a lot more to do: we’re going after the two biggest Western markets (UK and US) where trillions worth of financial products are held by big banks with dated systems and painful processes. JOIN US IF YOU WANT TO 1. Take ownership across a broad remit. You are trusted to make decisions that drive a material impact on the direction and success of Lendable from day 1 2. Work in small teams of exceptional people, who are relentlessly resourceful to solve problems and find smarter solutions than the status quo 3. Build the best technology in-house, using new data sources, machine learning and AI to make machines do the heavy lifting About the Role As the Security Operations Lead, you will take strategic and operational ownership of Lendable’s internal SecOps capability and serve as the technical relationship owner of our external Managed Security Service Provider (MSSP). You will act as our primary incident responder, with a strategic view on how Lendable’s operational defence should mature as we grow. This is a high-impact, senior individual contributor role with a path to management. We are looking for a "player-coach" who can execute deep 2nd and 3rd-line technical analysis today, while strategically designing and building out our internal SecOps function and team over the coming year. What You’ll Be Doing 1. Incident Command & Advanced Analysis * Incident Leadership: Serve as the primary Incident Commander for high-severity security escalations, coordinating cross-functional response efforts. You will have on-call responsibilities, but shared with the wider team. * Advanced Tier 2/3 Analysis: Act as the escalation point for technical investigations triggered by the MSSP first line team. * Crisis & Resilience Simulation: Maintain and evolve Lendable’s Security Crisis Management plan, running regular tabletop exercises to ensure business-wide readiness for systemic and supply-chain risks. 2. Vendor Governance & Operational Architecture * MDR/MSSP Technical Governance: Serve as the ultimate authority over our external MSSP. Define KRIs/KPIs, run rigorous service reviews, and hold the provider to strict detection quality standards. * Detection & Logging Strategy: Own Lendable's detection engineering roadmap. Ensure comprehensive, high-fidelity log ingestion pipelines across all corporate and cloud assets, focusing on minimising false positives and alert fatigue. * Automation-Driven Remediation: Oversee the vulnerability management lifecycle, partnering with IT and Engineering to drive automated remediation workflows rather than relying on manual tracking spreadsheets. 3. Capability Architecture & Strategic Maturity * Threat Intelligence: Develop a Threat Intel capability that translates external threats into actionable, proactive defences. * Core Domain Ownership: Take operational security ownership across our foundational tech stack, continuously optimising our posture across domains such as EDR, Email Security, DLP, and IAM to prevent data exfiltration and identity-based attacks. * Capability Scaling: Drive the technical roadmap for SecOps maturity. Systematically close visibility gaps, optimise operational metrics, and introduce AI-augmented capabilities (e.g., automated response playbooks). * Organic Function Growth: Design the future-state roadmap for the SecOps function. As you scale our technical capabilities, architect the requirement for team expansion, ensuring the team grows in lockstep with operational maturity. What We’re Looking For * Operational Seniority: Extensive experience in modern Security Operations, specifically acting as an Incident Commander or Lead Responder in high-stakes environments. * Strategic Vision: A clear, modern philosophy on how a SecOps function should run, prioritising automation and vendor optimisation over linear headcount growth. * Cloud-Native Literacy: Familiarity with modern tech stacks (AWS, Kubernetes, CI/CD pipelines) and the ability to leverage automation (Python, scripting, or automation platforms) to optimise analyst workflows. * The "Builder" Mentality: You are highly comfortable executing as a senior IC on day one, with the presence and leadership maturity to transition into a team manager. Interview Process 1. TA Screening Call 2. Hiring Manager Call 3. Technical Interview 4. Culture Interview LIFE AT LENDABLE * Winning team: the opportunity to scale up one of the world’s most successful fintech companies * Flexible working: flexible approach tailored to each role. Hybrid roles require three days in-office weekly; fully remote roles include regular opportunities for in-person connection through socials and off-sites * Socials & connection: opportunities and events to come together, socialise, and get to know each other beyond the office walls * Health coverage: support for your physical and mental wellbeing, including private health cover * Retirement & savings: long-term financial wellbeing through retirement savings plans * Employee referral programme: earn a competitive bonus when you refer successful new team members * Office meals & snacks: enjoy a fully stocked kitchen, plus complimentary lunches prepared by in-house chefs on in-office days at select locations * Sustainable commuting: cycle-to-work and electric vehicle salary sacrifice schemes available in select locations Please note: The availability and details of specific benefits vary by location and role. For more information, please speak to your Talent Partner. Check out our blog!

Sista ansökan: 22 aug.Publicerad: 22 juli

PythonAWSKubernetes