Senior Manager, Security Engineering & Operations

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Manager, Security Engineering & Operations based in Canada.

As Senior Manager, Security Engineering & Operations, you will lead and develop a North American security function spanning security engineering and operational defense. You will oversee vulnerability management, incident response, threat hunting, and hands-on security engineering initiatives. A key priority will be building a structured vulnerability management program, establishing clear service-level agreements, and strengthening remediation processes. You will guide the team through a transition from reactive, crisis-driven incident response toward proactive threat management and long-term security modernization. Working closely with infrastructure, cloud, and development teams, you will embed security into engineering practices across the organization. This leadership role combines technical expertise, operational accountability, and a strong commitment to team development and sustainable performance.

Accountabilities

In this role, you will establish and lead an integrated Security Engineering and Operations function, strengthening security capabilities while building a high-performing and sustainable team. Your responsibilities will include:

• Lead, manage, and develop Security Operations Engineers, Senior Security Engineers, and Security Engineers, fostering a culture of coaching, collaboration, and continuous improvement.

• Establish and manage a vulnerability management program in partnership with external service providers, defining service-level agreements, tracking mechanisms, remediation governance, and executive reporting.

• Design, maintain, and continuously improve enterprise incident response procedures, playbooks, escalation paths, and threat intelligence integration.

• Oversee the 24/7 on-call rotation, collaborating with HR and operational teams to improve sustainability, reduce burnout, and maintain effective incident response.

• Drive the transition from reactive crisis management to proactive threat hunting, strategic security engineering, and modernization initiatives.

• Define and monitor key performance indicators for threat detection, incident response, and vulnerability remediation.

• Present quarterly reports to the Chief Information Security Officer (CISO), providing visibility into team performance, security metrics, and overall program health.

• Lead hands-on security engineering initiatives, including infrastructure hardening, threat hunting, and security controls validation.

• Partner with Cloud Platform, Infrastructure, and Development teams to integrate security into engineering processes and operational practices.

• Mentor team members in automation, scripting, and process optimization to reduce manual workloads and improve operational efficiency.

Requirements

The ideal candidate brings extensive experience in security operations and engineering, combined with proven people-management capabilities and a strong technical foundation. You should be comfortable leading complex security initiatives, developing operational programs, and building teams that balance effective incident response with proactive security improvements. The following qualifications are expected:

• At least 12 years of experience in security operations, incident response, or security engineering, with substantial hands-on technical expertise.

• At least 7 years of experience managing security teams of five or more engineers, with a demonstrated ability to develop talent, coach employees, and build high-performing teams.

• Hands-on experience with Security Information and Event Management (SIEM) platforms, vulnerability scanning, remediation tracking, and detection rule development.

• Proven experience transforming security teams from reactive incident response operations into proactive threat hunting and security engineering functions.

• Experience managing Managed Security Service Provider (MSSP) relationships or managed vulnerability service engagements.

• Strong leadership skills, with a commitment to team development, operational sustainability, and psychological safety.

• Ability to establish effective security processes, performance metrics, remediation workflows, and operational governance.

Preferred Qualifications:

• CISSP, CISM, or CEH certification.

• Experience with vulnerability management platforms such as Nessus, Qualys, or comparable solutions.

• Background in improving incident response program maturity, developing security metrics, and implementing automation.

• Experience scaling security operations within growth-stage organizations.

Benefits

• Starting annual salary range of CAD $130,000–$170,000 for employees based in Canada.

• Eligible participation in medical, dental, and vision insurance plans.

• Disability and life insurance coverage.

• Retirement savings programs.

• Paid time off.

• Wellness programs and additional employer-sponsored benefits, depending on country and employment status.

• Remote-first working environment with flexible work arrangements.

• Learning and professional development opportunities.

• Collaborative culture focused on innovation, data-driven decisions, accountability, trust, and continuous improvement.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1