Security and Threat Operations Manager

DriveWealth

. Build and mature the Security & Threat Operations function protecting DriveWealth's brokerage platform and corporate environment .

Posted 10/15/2026full-timeUnited StatesSeniorLead💰 $200,000 - $250,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in security operations, incident response, and threat intelligence, with a strong focus on team leadership and operational maturity. Proficient in managing security monitoring, incident response lifecycles, and regulatory compliance within a brokerage environment.

Highest-signal resume keywords

Security Operations ManagementIncident Response LeadershipThreat Intelligence DevelopmentAWS and Kubernetes KnowledgeDLP and WAF Control Tuning

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat IntelligenceDetection Content DevelopmentIncident ResponsePython ScriptingSQL QueryingSIEM AnalyticsEndpoint AnalyticsDigital Risk MonitoringForensic Evidence HandlingExposure Management

Soft Skills

People LeadershipProcess DesignPrioritizationInfluence Skills

Tools & Technologies

DLPWAFEmail FilteringAWSKubernetesSIEMEndpoint Telemetry

Industry Keywords

NIST CSFMITRE ATT&CKSEC Rules 17a-3SEC Rules 17a-4Incident Commander

Tech Stack

Tools & technologies

AWSKubernetesMacOSPythonSQL

About the role

Key responsibilities & impact

Build and mature the Security & Threat Operations function protecting DriveWealth's brokerage platform and corporate environment
Report to the Chief Information Security Officer
Grow and lead the team, including hiring, coaching, training, career development, and performance management
Establish the operating model, roadmap, monitoring coverage, escalation procedures, and service provider oversight
Own detection content, threat intelligence, proactive hunting, attack simulations, and purple-team validation
Own security monitoring and investigations across product and corporate environments
Own digital risk monitoring for external attack surfaces, leaked credentials, exposed data, impersonation, phishing domains, and takedown coordination
Build automated security response actions with Security Engineering
Own the incident response lifecycle as Incident Commander, including preparedness, forensic evidence handling, containment, recovery validation, regulatory coordination, and post-incident improvement
Own the exposure management lifecycle from discovery through verified closure
Operate and tune DLP, WAF, email filtering, and identity compromise prevention controls
Partner with Legal, Compliance, Security Engineering, and GRC to implement SEC and FINRA requirements, including SEC Rules 17a-3 and 17a-4
Automate control validation and evidence collection, support audits and regulatory examinations, and drive remediation of technical findings
Partner with Security Engineering, DevOps & Platform, and Product & Engineering to evolve defenses across AWS, Kubernetes, trading infrastructure, and corporate technology

Requirements

What you’ll need

8+ years in security operations, detection engineering, incident response, or related disciplines
3+ years managing technical teams
Experience building or maturing an operations function
Experience serving as Incident Commander during significant security incidents
Hands-on expertise in threat intelligence, detection content development, SIEM and endpoint analytics, investigation, threat hunting, and defensive validation
Practical scripting or query skills in Python, SQL, or comparable languages
Working knowledge of AWS, Kubernetes, API security, identity, and Windows/macOS endpoint telemetry
Experience creating, operating, and tuning preventive controls such as DLP, WAF, and email filtering
Experience investigating insider threats and digital risks such as exposed credentials, impersonation, and phishing domains
Strong people leadership, process design, prioritization, and influence skills
Ability to support on-call escalation and incident response outside normal business hours
Familiarity with NIST CSF, incident response practices, and MITRE ATT&CK
Bachelor's degree in a related field or equivalent practical experience
Applicants must be authorized to work for any employer in the U.S.; DriveWealth does not sponsor or take over sponsorship of an employment visa
Applicants must possess the legal right to work in the country where the position is located
For US-based roles, current authorization to work in the United States without current or future visa sponsorship is required

Benefits

Comp & perks

Competitive compensation
Equity
401(k) match
Medical insurance
Dental insurance
Vision insurance
Disability insurance
Paid Parental Leave
Wellness reimbursement
Company-provided phone
Personal development allowance
Generous Paid Time Off (PTO)
Observed holidays
Bonus
Heavily subsidized benefits and perks
Flexible remote work for eligible locations
Company office visits from time to time for eligible remote locations