Manager, AI-Native Security Operations

CGWS - COME GROW WITH US

. Lead and own the transformation of BambooHR's AI-native Security Operations function .

Posted 9/25/2026full-timeUtah • United StatesMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Lead and own the transformation of BambooHR's AI-native Security Operations function
Lead a team spanning detection engineering, threat intelligence and hunting, and incident response
Run daily security operations, including incidents, detections, hunts, on-call coverage, service-provider relationships, and operational metrics
Recruit, interview, hire, onboard, retain, evaluate, coach, and develop security personnel
Manage shift coverage, on-call rotation, incident assignment, detection backlog priority, and rule retirement
Serve as incident commander for most security incidents and partner with the VP of Information Security on severe incidents and executive communication
Manage security service-provider relationships and service reviews
Publish regular operational metrics for the team and executive leadership
Automate Tier-1 triage and an increasing share of Tier-2 workflows
Build and enforce automated incident runbooks
Run detection engineering as a product with version-controlled rules and CI validation
Build in-house detection capabilities using BambooHR's security telemetry
Establish a formal threat intelligence program and ensure intelligence produces detections, hunt hypotheses, or control changes
Run a hypothesis-driven threat-hunting program
Lead the transition from AI-assisted to delegated AI work within explicit authority boundaries
Define what decisions remain human-controlled
Build detection and response coverage for AI-era threats
Partner with security engineering, product security, identity and access management, and governance and risk teams

Requirements

What you’ll need

5+ years in security operations, incident response, or detection engineering
2+ years directly managing a team of security analysts or detection engineers
Experience running a SOC or detection function at a SaaS or cloud-native company
Experience with multi-tenant products and SOC 2 and/or ISO 27001 compliance environments
Hands-on detection engineering experience, including writing, testing, tuning, and retiring detections
Experience managing an MDR or MSSP relationship
Experience automating SOC workflows through SOAR, runbook automation, or LLM- and agent-based triage and enrichment
Fluency with security data platforms, including data lake or lakehouse architectures
Incident command experience, including executive and cross-functional communication
People leadership experience, including hiring, coaching, and performance management
Excellent written communication
Excellent prioritization
Comfort working in an AI-forward environment
Ability to work in a high-paced and sometimes stressful environment, including on-call escalation
Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience
At least five years of related security operations experience
Must be available for on-call escalation and incident response outside standard business hours when required
Must pass background and credit checks
Physical ability to sit for prolonged periods and work on a computer

Benefits

Comp & perks

Comprehensive health, life, and disability insurance
4 weeks of vacation
12 company holidays
Parental leave
Volunteer time off
401k plan with up to 6% company match
$2000 Paid-Paid Vacation bonus
EAP through Headspace
Professional development
Hybrid work flexibility
Reasonable accommodations throughout the hiring process