Security & Threat Operations Manager (Fintech)

Location: United States only. Candidates must be based in New York City, Chicago, Austin, Dallas, Denver, Miami, the San Francisco Bay Area, or Seattle. New York and Chicago require regular office attendance on a team-set cadence; Austin, Dallas, Denver, Miami, San Francisco, and Seattle are fully remote with occasional office visits. Remote work outside these locations is not available. Applicants must be authorized to work for any employer in the U.S.; visa sponsorship is not provided.

Salary: $200,000–$250,000 USD per year.

Company

hirify.global is a B2B financial technology company providing an API-based platform for trading U.S. equities, mutual funds, ETFs, fixed income, and options.

What you will do

• Build and mature the security and threat operations function, including its roadmap, operating model, monitoring coverage, escalation procedures, and service provider oversight.
• Lead hiring, coaching, training, career development, and performance management for the security operations team.
• Own threat detection, security monitoring, threat hunting, investigations, digital risk monitoring, and detection validation through attack simulations and purple-team exercises.
• Lead the incident response lifecycle as Incident Commander, including preparedness, forensic evidence handling, containment, recovery validation, regulatory coordination, and post-incident improvements.
• Own exposure management and the operation and tuning of DLP, WAF, email filtering, and identity compromise prevention controls.
• Partner with Security Engineering, DevOps, Product, Legal, Compliance, and GRC on automated response, control assurance, audits, and SEC and FINRA requirements.

Requirements

• 8+ years of experience in security operations, detection engineering, incident response, or related disciplines, including 3+ years managing technical teams.
• Experience building or maturing an operations function and serving as Incident Commander during significant security incidents.
• Hands-on expertise in threat intelligence, detection content, SIEM, endpoint analytics, investigation, threat hunting, and defensive validation.
• Practical scripting or query skills with Python, SQL, or comparable languages, plus working knowledge of AWS, Kubernetes, API security, identity, and endpoint telemetry.
• Experience operating and tuning DLP, WAF, and email filtering controls, investigating insider threats and digital risks, and supporting on-call escalation.
• Familiarity with NIST CSF, incident response practices, MITRE ATT&CK, and regulated financial services requirements, including SEC and FINRA environments.

Nice to have

• Experience supporting production environments with demanding availability and latency requirements.
• Bachelor’s degree in a related field or equivalent practical experience.
• CISSP, GCIH, GCIA, or GCFA certification.

Culture & Benefits

• Fintech start-up pace combined with institutional-grade execution and regulatory discipline.
• Competitive compensation with equity, bonus eligibility, and a 401(k) match.
• Medical, dental, vision, and disability insurance, plus paid parental leave.
• Wellness reimbursement, company-provided phone, personal development allowance, paid time off, and observed holidays.
• AI tools are used to improve signal quality, reduce friction, and accelerate outcomes.