Security Operations Team Lead

Cyera

. Lead, coach, and develop the Security Operations team .

Posted 10/17/2026full-timeRemote • New York • United StatesSenior💰 $150,000 - $225,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading security operations, incident response, and detection engineering, with a strong focus on AWS security architecture and AI-assisted workflows. Capable of managing teams, defining metrics, and communicating effectively with stakeholders in high-pressure situations.

Highest-signal resume keywords

Security Operations LeadershipIncident Response ManagementAWS Security ArchitecturePython ProgrammingDetection Engineering

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseDetection EngineeringAI-Assisted WorkflowsSecurity Metrics DefinitionCloud Incident ResponseSIEMTriageInvestigationPlaybook DevelopmentOperational Cadence

Soft Skills

Team LeadershipMentoringClear CommunicationCalm Under PressureDecisive Decision-Making

Tools & Technologies

AWSIAMCloud TelemetryDSPMDLP

Certifications & Qualifications

AWS Security SpecialtySolutions Architect AssociateGCIHGCFACISSP

Industry Keywords

FedRAMPSOC 2ISO 27001

Tech Stack

Tools & technologies

AWSCloudPython

About the role

Key responsibilities & impact

Lead, coach, and develop the Security Operations team
Set priorities, run the operational cadence, and build career paths
Direct response to major incidents, make containment calls, manage stakeholder communication, and own after-action processes
Own metrics and roadmap for the agentic SOC
Manage the fleet of security agents handling first-pass triage, investigation, and response
Define guardrails and human approval points, evaluate accuracy, maintain an audit trail, and report impact on autonomous handling and analyst capacity
Own posture goals, remediation governance, product feedback loop, and reporting for the internal Cyera deployment
Set detection and response priorities with the Security Engineering lead based on threat model and coverage
Design and run on-call and coverage arrangements, including external or follow-the-sun support
Handle the hardest investigations, build detections and playbooks, and write code using AI-assisted workflows
Represent Security Operations to security leadership and R&D; translate operational data into risk and status

Requirements

What you’ll need

5 or more years in security operations, incident response, or detection engineering, including senior or lead-level work
Experience running significant incidents end to end, including executive communication
Experience leading, mentoring, or managing engineers or analysts
Hands-on experience running AI-assisted and agent-based security workflows, with a clear view of where agents are reliable, where they fail, and how to measure both
Strong knowledge of AWS security architecture, IAM, logging, and cloud incident response
AWS Security Specialty or Solutions Architect Associate, or equivalent demonstrated depth
Strong Python and detection engineering across SIEM and cloud telemetry; able to review and improve others' work
Experience defining metrics, running an operational cadence, and reporting to leadership
Clear communication with executives and engineers; calm and decisive under pressure
Experience with DSPM, DLP, or operating a security product as an internal customer
Experience in regulated environments such as FedRAMP, SOC 2, or ISO 27001
GCIH, GCFA, CISSP, AWS Security Specialty, or similar certifications are nice to have

Benefits

Comp & perks

Unlimited PTO
Paid holidays and sick time
Health, vision, and dental insurance
Life, short and long-term disability insurance
Standard benefits and equity package
Potential merit increases based on individual or company performance, time in role, and other discretionary factors