
Security Engineering Manager, Security Operations & Incident Response
Required skills
- Security Operations
- Incident Response
- Investigations
- threat hunting
- detection
- mitigation
- containment
- security engineers
- analysts
- technical management
Nice to have
- intrusion detection
- insider threats
- digital forensics
- global
- regulated organization
- logs and events processing
Role summary
Meta is seeking a Security Engineering Manager for its Global Security Operations and Incident Response team. This role involves managing a team of security engineers and analysts focused on identifying, investigating, containing, and mitigating security incidents. The manager will be responsible for developing multi-year roadmaps, scaling security operations, and driving strategic initiatives to mature the team's capabilities. Key responsibilities include hiring, growing, and mentoring the team, defining operational metrics, and collaborating with cross-functional partners to develop engineering solutions and automate security workflows. The ideal candidate has extensive experience in Security Operations and Incident Response, with proven technical management experience and a background in operating systems, programming languages, and attacker TTPs.
Responsibilities
- Support a team of security engineers and analysts who hunt, detect, and respond to internal and external threats.
- Influence and align the organization's vision and strategy, while engaging the team to develop and deliver specific, multi-year roadmaps, programs, and projects.
- Ensure prioritization, resourcing, and timely delivery of project work within a changing business environment.
- Define operational metrics, key performance indicators, and service level objectives to assure the team achieves operational excellence across Security Operations, Incident Response and Investigation services.
- Hire, grow, and build a team capable of meeting defined goals and delivering measurable outcomes capable of achieving the team's mission.
- Coach, mentor, support, and care for the team in a way that enables long-term career development, happiness, and success at scale.
- Work with, partner, and influence other teams to develop engineering solutions designed to mitigate security risks and automate investigative and operational workloads.
- Build, cultivate, and maintain positive relationships with cross-functional partners to enable the team's ability to effectively and efficiently execute on the service portfolio.
- Apply broad technical and process expertise across Security Operations and Incident Response domains to guide team decisions, inform strategy, and resolve complex issues.
- Collaborate with a wide range of cross-functional partners and teams to develop scalable and flexible investigative and incident response services.
- Focus on ruthlessly prioritizing, automating, and scaling every aspect of our Security Operations and Incident Response capabilities.
Minimum Qualifications
- 10+ years of work experience in Security Operations, Incident Response and Investigations, including 2+ years of proven hands-on technical management experience of security engineers and analysts
- Experience recruiting, building, and leading technical teams, including performance management
- Experience developing and delivering information on program status and security incidents for senior leadership
- Experience leading and managing complex multi-year cross-functional programs
- Knowledge of operating systems, file systems, and memory on Windows, MacOS, or Linux
- Experience with an interpreted programming language (PHP, Python, Perl, Ruby, etc.)
- Experience with attacker tactics, techniques and procedures
- Experience working across security, risk management, and compliance domains
- BA/BS in Computer Science or equivalent experience in security
Preferred Qualifications
- Background in intrusion detection, security investigations, insider threats or digital forensics
- Previous experience as a Lead security incident response engineer in a large, global and regulated organization
- Broad knowledge across the Security domain, as well as deep focus in one (or more) areas such as Logs and events processing, Incident Management, Digital Forensics, Detection and/or response tool development
- Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
- Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
- Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
$184,000/year to $257,000/year + bonus + equity + benefits
Similar roles
Construction Manager, RetailMeta · Remote · Remote
Agency Solutions ManagerMeta · Chicago, IL · Onsite
Lead Installation Technician - Electronic SecurityDiversified Energy Company · Boydton, VA · Onsite- Director of Security & RiskSentiLink · Remote · Remote
- Head of SecurityHelius · Remote · Remote
Senior Security EngineerRain · New York, NY · Onsite
