{"id":3615672,"url":"https://alion.io/job/sitecore-manager-security-operations-incident-response","title":"Manager, Security Operations & Incident Response","company":{"id":55297,"name":"Sitecore","domain":"sitecore.com","url":"https://alion.io/company/sitecore","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Dublin, Ireland"],"countries":["IE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"KEV","optional":false},{"name":"Machine Learning","optional":false},{"name":"SIEM","optional":false},{"name":"Wiz","optional":false}],"status":"live","first_seen_at":"2026-11-02T12:23:23Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-04T11:21:36Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"About Us:\nAt Sitecore, our mission is to simplify how brands reach, engage, and serve people by delivering intelligent, personalised digital experiences that connect the world. We empower the world’s most iconic brands to build lifelong relationships with their customers-seamlessly, smartly, and at scale.\nAs the leading provider of agentic digital experience software, Sitecore brings together content, commerce, and data into one composable platform that enables brands to deliver millions of meaningful, adaptive experiences every day. Trusted by global leaders such as American Express, Porsche, Starbucks, and L’Oréal, Sitecore helps brands transform engagement through experiences that are not only personalised but predictive and dynamic.\nOur foundation is our people-a diverse, passionate, and collaborative global team spanning over 25 countries. We believe that every experience matters, and that belief starts with how we work together. Our values guide how we lead, innovate, and connect. They are the behaviours that bring our mission and vision to life, every day, in every interaction.\nAs we continue to evolve, we are actively cultivating AI skills across our teams to unlock new levels of creativity, efficiency, and insight. From engineering to customer experience, AI capabilities are becoming integral to how we design, build, and deliver the next generation of digital experiences.\nLearn more at Sitecore.com.\nAbout the Role:\nThe Manager, Security Operations & Incident Response is responsible for leading Sitecore's Security Operations Center (SOC) and Incident Response (IR) functions. This role oversees daily security monitoring, detection, triage, investigation, containment, and response activities while ensuring effective collaboration with external security service providers and internal stakeholders.\nYou will drive the evolution of Sitecore's security operations capabilities toward an AI-assisted and automation-enabled operating model, leveraging machine learning, generative AI, autonomous workflows, and security orchestration technologies to improve detection quality, response speed, and operational efficiency. The role is accountable for establishing a modern, cloud-native SOC capable of supporting Sitecore's global SaaS business and for continuously improving the organization's cyber defense posture.\nWhat You'll Do\nSecurity Operations Leadership\nLead the day-to-day operations of the SOC and Incident Response function\n\nManage security monitoring, alert triage, investigation, escalation, containment, recovery, and post-incident analysis activities\n\nEstablish operational priorities, procedures, playbooks, metrics, and service levels\n\nEnsure effective coverage across cloud, endpoint, identity, SaaS, and application environments\n\nMaintain operational readiness for emerging threats, significant vulnerabilities, and security incidents\n\nMSSP Management\nServe as the primary operational interface with Sitecore's Managed Security Service Provider (MSSP)\n\nDefine, monitor, and improve MSSP performance expectations and service levels\n\nReview alert quality, escalation practices, investigation outcomes, and operational effectiveness\n\nDrive continuous tuning and optimization of security monitoring capabilities\n\nEnsure MSSP services align with Sitecore's security strategy and risk priorities\n\nIncident Response\nLead cyber incident response activities and coordinate technical response efforts\n\nAct as Incident Commander or designate response leadership during security incidents\n\nCoordinate activities across Security, Engineering, Infrastructure, Product, Legal, Privacy, Communications, and other stakeholders as required\n\nEnsure appropriate evidence collection, documentation, lessons learned, and corrective actions\n\nMaintain incident response playbooks, procedures, and readiness exercises\n\nThreat Detection & Monitoring\nOwn the effectiveness of security detections across all monitoring platforms\n\nDrive improvement of detection coverage for identity, cloud, endpoint, SaaS, infrastructure, and application threats\n\nReview and prioritize alerts from platforms including Wiz, Microsoft security technologies, cloud security tooling, and third-party detection sources\n\nPartner with Security Engineering to implement and improve detection logic, workflows, and response automation\n\nVulnerability and Exposure Response\nOwn operational response processes for critical security findings and emerging threats\n\nCoordinate investigation and response activities associated with Wiz findings, attack path analysis, and high-priority vulnerabilities\n\nSupport 0-day, KEV, and active exploitation response activities\n\nProvide operational visibility into remediation progress and risk reduction activities\n\nAI-Assisted Security Operations\nDevelop and execute the roadmap for an AI-assisted SOC\n\nIdentify opportunities to leverage AI for alert enrichment, investigation support, threat analysis, detection engineering, reporting, and operational efficiency.\n\nEstablish governance, controls, and oversight for AI-enabled security operations\n\nDrive adoption of approved autonomous response capabilities where operationally appropriate\n\nLead the implementation of AI-assisted and autonomous containment actions for approved scenarios while ensuring appropriate human oversight, testing, and governance\n\nContinuous Improvement & Metrics\nDefine and track SOC and IR performance metrics\n\nMeasure detection effectiveness, response effectiveness, automation adoption, containment speed, incident trends, and MSSP performance\n\nIdentify operational improvement opportunities and drive execution\n\nProduce executive-ready operational reporting and status updates\n\nTeam Leadership\nRecruit, develop, mentor, and lead security operations personnel\n\nEstablish clear accountability, performance expectations, and development plans\n\nBuild a high-performing operational security culture focused on continuous improvement and measurable outcomes\n\nFoster strong collaboration across Security, Engineering, IT, Product, and Operations teams\n\nWhat You'll Bring\nSOC and Incident Response Leadership: Proven experience managing a Security Operations Center (SOC) and Incident Response (IR) function, including security monitoring, alert triage, threat investigation, containment, recovery, and post-incident reviews in a 24/7 environment\n\nCloud-Native Security Operations: Strong hands-on experience securing and monitoring cloud environments (AWS, Azure, or GCP), SaaS platforms, endpoints, identities, infrastructure, and applications within a global technology or SaaS organization\n\nMajor Incident and Crisis Management: Demonstrated experience leading complex security incidents as Incident Commander, coordinating technical response and cross-functional stakeholders, and managing evidence collection, incident communications, and remediation activities\n\nMSSP and Security Tooling Management: Experience managing external MSSPs, defining SLAs and operational KPIs, evaluating service quality, and optimizing security monitoring and detection platforms such as Wiz and Microsoft security technologies (e.g., Sentinel, Defender)\n\nThreat Detection, Vulnerability and Response Automation: Strong understanding of threat detection engineering, SIEM/SOAR, vulnerability and exposure management, threat intelligence, and response to critical vulnerabilities, zero-day exploits, KEVs, and active threats.\n\nAI-Driven Security Operations and Automation: Demonstrated experience implementing or advancing AI-assisted security operations, leveraging machine learning, generative AI, automation, or autonomous workflows for alert enrichment, investigation, detection, and response, with appropriate governance and human oversight.\n\nWhy Join Sitecore?\nAt Sitecore, you will have the opportunity to shape the experiences behind digital products used by organizations around the world. You will work with talented colleagues across Product, Engineering, and Design to solve meaningful customer problems, influence product strategy, and help define the next generation of digital experiences.\nEqual Opportunities at Sitecore:\nSitecore is proud to be an equal opportunity workplace. We are committed to equal employment opportunity without unlawful regard to race, color, ancestry, religion, gender, national origin, sexual orientation, age, citizenship, marital status, disability, veteran status, or any other locally legally protected characteristic.","description_format":"text","description_chars":8453,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Ireland","iso":"IE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Artificial Intelligence","E-learning","Virtual Events"],"lifecycle":[{"event":"open","at":"2026-11-02T16:21:56Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":42,"reasons":["conf:4","velocity","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/sitecore-manager-security-operations-incident-response","json_url":"https://alion.io/job/sitecore-manager-security-operations-incident-response.json","meta":{"generated_at":"2026-11-04T14:53:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22593,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":55297},"rest":"https://alion.io/mcp/rest/get_company?id=55297"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsitecore-manager-security-operations-incident-response"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsitecore-manager-security-operations-incident-response"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsitecore-manager-security-operations-incident-response"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sitecore-manager-security-operations-incident-response\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsitecore-manager-security-operations-incident-response"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3615672}},{"tool":"search_jobs","arguments":{"company":"sitecore.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3615672},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}