Senior Manager, Security Operations - Detection Engineering & Incident Response

Leads Everpure's global Detection Engineering and Cloud Incident Detection & Response (CIDR) teams, with a mandate to make security operations proactive and intelligence-led across cloud, SaaS, infrastructure and endpoints. The senior manager works from the Santa Clara office and partners with GRC, infrastructure, product security and engineering leadership.

The role sets objectives, work plans and SLAs across detection, automated response and incident triage, with the aim of steadily cutting mean time to detect and respond. It oversees a detection inventory mapped to MITRE ATT&CK and tests whether controls work through automated simulations, red and purple team exercises and hunt findings. Bringing multi-cloud, endpoint, network and SaaS logs into the SIEM and SOAR pipelines, cutting false positives and speeding automated remediation are part of the remit. During major incidents the manager directs the response and the root-cause reviews that follow, and turns security metrics into dashboards and board-level risk reports that push remediation across teams. People leadership covers budget, resourcing and development across several specialised squads.

Everpure wants at least four years of direct management leading and scaling enterprise security operations, detection engineering and incident response in hybrid cloud and SaaS settings, deep command of SIEM, SOAR, EDR and cloud telemetry, detection-as-code in CI/CD, threat-informed defence, and confidence with executives.