Manager II, Security Operations

SPS Commerce

. Lead Security Operations on the Cyber Engineering & Defense team .

Posted 10/8/2026full-timeRemote • Minnesota • United StatesSeniorLead💰 $133,800 - $204,100 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in leading Security Operations, managing Cyber Defense teams, and executing multi-quarter security programs. Proficient in incident command, operational performance management, and the integration of AI agents within security frameworks.

Highest-signal resume keywords

Security Operations ManagementIncident Command ExperienceMSP/MSSP Relationship ManagementCyber Defense Tooling ExpertisePeople Management and Coaching

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Detection EngineeringIncident ResponseCyber Capability MaturationRisk ReductionAlert TriageOperational AccountabilityEscalation Threshold DefinitionPerformance ManagementRoadmap ExecutionAI Agent Oversight

Soft Skills

Cross-Functional CommunicationCoaching and MentoringPerformance Feedback Delivery

Tools & Technologies

CrowdStrikeSIEMSOARJiraPantherSplunkSentinelTinesTorqPhantom

Certifications & Qualifications

GIAC GCIHGIAC GCIAGIAC GCDAOSCPCISSP

Industry Keywords

Cyber DefenseSOC OperationsSev1 Incident ManagementSupply Chain Attack PatternsCI/CD Security

Tech Stack

Tools & technologies

AWSSplunk

About the role

Key responsibilities & impact

Lead Security Operations on the Cyber Engineering & Defense team
Directly manage Cyber Defense engineers and analysts
Own an 8-person L1/L2 SOC contractor pod under a managed-services model
Own SOC operational performance, including alert triage MTTD/MTTR, true-positive rate, ticket throughput, and time-to-containment
Serve as incident commander for Sev1 and escalated security incidents
Manage severity determination, cross-functional and executive communications, and resolution paths
Own operational accountability for AI agents in the SOC and detection-and-response pipeline
Define escalation thresholds, human-in-the-loop checkpoints, and output quality controls
Manage the MSP/contractor relationship, including onboarding, performance, retention, and escalation quality
Translate Cyber Defense strategy into a tactical SecOps roadmap
Own the SecOps Jira project and quarterly sequencing
Own quality of Cyber Defense tooling, including SIEM detection content, source health, CrowdStrike administration, NG-SIEM migration, and SOAR runbooks
Run a healthy 24x7 on-call rotation across FTE and contractor coverage
Provide day-to-day management, coaching, weekly 1:1s, and career development for Cyber Defense staff
Partner with Agentic Cyber Engineering on capability definition, development, and delivery of agentic systems

Requirements

What you’ll need

8+ years in security operations, detection engineering, or incident response
Experience maturing Cyber capabilities and driving organizational transformation
Demonstrated Sev1 incident command experience with cross-functional engineering and executive communications
Track record of owning a multi-quarter security program end-to-end, including roadmap, execution, and measurable risk reduction
Experience owning MSP/MSSP relationships at scale, including renewal economics, scope changes, and consolidation decisions
Working knowledge of EDR, SIEM, SOAR, and ticketing tooling
Working knowledge of tools such as CrowdStrike, NG-SIEM/Panther/Splunk/Sentinel, Tines/Torq/Phantom, and Jira
Demonstrated ability to coach engineers, run effective 1:1s, and deliver clear performance feedback
3+ years of direct people management, including hiring, performance management, and career development preferred
Direct experience with CrowdStrike Falcon, Panther, Tines, AWS, EKS, and Atlassian preferred
Familiarity with supply chain attack patterns and CI/CD security preferred
Experience working with distributed or offshore SOC teams preferred
Experience directing or overseeing AI agents in an operational service-delivery context preferred
Experience with agentic frameworks and orchestration such as LangGraph or agent tool-use pipelines preferred
Industry certifications such as GIAC GCIH/GCIA/GCDA, OSCP, or CISSP preferred

Benefits

Comp & perks

Health insurance
Dental insurance
Vision insurance
Disability insurance
Life insurance
Paid time-off
401(k)
Health and flexible spending accounts
Stock purchase plan
Hybrid work with remote flexibility
In-person collaboration opportunities