- Lead day-to-day operations for the Global Security Operations team and serve as incident commander for major security incidents.
- Manage and develop a globally distributed team, including mentorship, training, roadmap and OKR setting, and on-call coverage.
- Own the relationship with the 24/7 Managed Security Services Provider, including escalations, service quality, vendor performance, costs, and handoffs.
- Own detection strategy and SIEM health by building custom detections, tuning alerts, expanding log coverage, and scaling the platform.
- Modernize Security Operations with AI and automation to streamline triage, enrichment, investigation, and response.
- Build and maintain incident response playbooks, runbooks, and training materials.
- Track post-incident action items across teams and ensure immediate fixes and longer-term improvements are completed.
- Identify recurring incident root causes and partner with Engineering, Infrastructure, Security, and Product teams on preventive fixes.
- Define SecOps metrics and KPIs and report monthly to senior leadership.
- Champion security awareness through tabletop exercises, training sessions, and talks; participate in the global on-call rotation.
People Management