Senior Manager, Security Engineering & Operations

Job Description:

Job Title: Senior Manager, Security Engineering & Operations

Location: Remote | USA, Canada

Reports to: Chief Information Security Officer

Employment Type: Full-time

The Senior Manager will lead a combined Security Engineering and Operations function for North America, overseeing vulnerability management, incident response, threat hunting, and hands-on security engineering. You will establish the managed vulnerability service engagement, define SLAs and remediation processes, and scale the team from unsustainable crisis-mode incident response to proactive threat management and strategic engineering. This role requires both operational discipline and technical credibility.

• Lead and develop the Security Operations Engineer, Senior Security Engineer, and Security Engineers; build high-performing teams and coaching culture
• Establish vulnerability management program with our partners, defining SLAs, tracking mechanisms, remediation governance, and executive reporting
• Design and maintain enterprise incident response procedures, playbooks, escalation paths, and threat intelligence integration
• Oversee 24x7 on-call rotation, work with HR and operations to improve sustainability, and reduce burnout while maintaining response quality
• Manage the transition from crisis response mode) to strategic engineering focus and modernization work
• Develop KPIs for detection, response, and remediation; report quarterly to CISO on team metrics and program health
• Lead hands-on security engineering projects including infrastructure hardening, threat hunting, and controls validation
• Interface with Cloud Platform, Infrastructure, and Development teams to embed security into engineering practices
• Mentor team on automation, scripting, and process improvement to reduce manual toil

• 12+ years in security operations, incident response, or security engineering roles with hands-on technical depth
• 7+ years managing security teams of 5+ engineers with demonstrated team development and coaching ability
• Hands-on experience with SIEM, vulnerability scanning, remediation tracking, and detection rule development
• Proven track record transitioning teams from reactive incident response to proactive threat hunting and engineering
• Experience managing managed security service provider (MSSP) or managed vulnerability service engagements
• Strong leadership ability; commitment to team development, sustainability, and psychological safety

• CISSP, CISM, or CEH certification
• Experience with Nessus, Qualys, or similar vulnerability management platforms
• Background in incident response program maturity, metrics, and automation
• Experience scaling security operations in growth-stage organizations

This position has a starting salary range of $130,000 - $170,000 CAD / $160,000 - $200,000 USD per year. The range represents what we reasonably and in good faith expect to pay for the role at the time of posting. An employee’s pay within the range is determined by a number of factors, including relevant skills, education, qualifications, experience, performance, business or organizational needs, and geographic location.

Eligible employees may participate in medical, dental, vision, disability, life insurance, retirement savings programs, paid time off, wellness programs, and other company-sponsored benefits. Benefits vary by country and employment status.

JD Power powers auto-related decisions through proprietary data, advanced analytics, deep industry expertise, and workflows that connect insight to action. Operating across North America, Europe, and Australia, we help customers make better decisions and achieve better outcomes.

As a virtual-first company, we offer flexible work arrangements, opportunities for learning and development, and a culture centered on the Values that guide how we work every day.

· We power our customers’ success. Everything we do is focused on helping customers make better decisions and achieve better outcomes.

· We are innovative, collaborative, and grounded in data. We combine advanced analytics with human expertise to deliver insight that holds up in the real world.

· We make things easy. We turn complexity into clarity so teams can act faster and with confidence.

· We get it done. We focus on execution, accountability, and results.

· We start with trust and prove it every day. Independence, integrity, and credibility are the foundation of our work.

JD Power is committed to employing a diverse workforce. Qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, gender expression, veteran status, or disability.

JD Power is committed to providing reasonable accommodations throughout the recruitment process for individuals with disabilities or other protected needs under applicable local laws. Please contact for accommodation request.

JD Power does not disclose your personal data to unauthorized third parties. However, as a global corporation consisting of multiple affiliated companies in various countries, JD Power has international sites and JD Power uses resources located throughout the world. JD Power may from time to time also use third parties to act on JD Power’s behalf. You agree to the fact that to the extent necessary your personal data may be transferred and/or disclosed to any company within JD Power group of companies as well as to third parties acting on JD Power’s behalf, including also transfers to servers and databases outside the country where you provided JD Power with your personal data. Such transfers may include for example transfers and/or disclosures outside the European Economic Area and in the United States of America. If you are a California or United Kingdom resident, additional disclosures about the information we collect and how we use that information can be found by clicking here.

Candidates must be legally authorized to work in the country where employment is offered. JD Power does not provide employment sponsorship for this position.

This position is posted exclusively on and select trusted job boards such as LinkedIn or Indeed. All official communication comes from email addresses ending in @jdpower.com or @jdpa.com. We will never ask for payment, equipment purchases, or upfront fees. We may take additional steps to verify candidate information to protect the integrity of our recruitment process.

To all recruitment agencies: JD Power does not accept unsolicited agency resumes and we are not responsible for any fees related to unsolicited resumes.

Originally posted on Himalayas