Manager of Security Operations, Incident Detection and Response (AI)

Location: Remote, based in the United States, with EST time zone alignment

Salary: $186,701–$233,376 USD

Company

hirify.global provides automated data movement infrastructure that helps organizations move, transform, and trust data for analytics, AI, and business decisions. hirify.global and dbt Labs are integrating their teams and technologies.

What you will do

• Lead, mentor, hire, and develop detection and response engineers and analysts; define team structure, goals, performance expectations, on-call rotations, and hiring plans.
• Own enterprise incident response, including investigation, containment, eradication, remediation, post-incident reviews, and incident command for major events.
• Build and optimize high-fidelity detections across cloud, identity, endpoint, SaaS, and application layers using threat-informed approaches such as MITRE ATT&CK.
• Apply AI, including LLMs and AI agents, to automate alert triage, enrichment, investigation, and response, while detecting threats targeting AI systems and usage.
• Design security strategies for multi-tenant SaaS environments, including tenant isolation, cross-tenant access, customer data protection, and customer-impacting incident response.
• Own the security operations technology roadmap, budget, vendors, automation, threat hunting, metrics, and collaboration across engineering, infrastructure, IT, application security, GRC, Legal, Privacy, Communications, and executives.

Requirements

• Deep expertise in security operations, incident detection, investigation, and response, with experience leading enterprise-wide incident response.
• Proven experience managing, hiring, and developing security teams.
• Extensive experience securing and responding to incidents in multi-tenant SaaS environments at scale, including tenant isolation and customer data protection.
• Hands-on experience applying AI, LLMs, and AI agents to security operations and understanding the risks introduced by AI.
• Strong experience with AWS, GCP, or Azure, Kubernetes, containerized environments, cloud-native logging, and detection.
• Proficiency with SIEM, SOAR, EDR/XDR, identity, and cloud detection tools, including integration into automated workflows.
• Experience owning security technology roadmaps, tool selection, budgets, and vendor management.
• Excellent problem-solving, troubleshooting, communication, collaboration, and executive/customer communication skills, including decision-making under pressure.
• Strong curiosity, urgency, and a hands-on approach to complex technical problems.

Culture & Benefits

• Remote full-time work for candidates based in the United States and aligned with the EST time zone.
• Employer-paid medical insurance, with coverage varying by country and worker type.
• Paid vacation or flexible/unlimited vacation depending on role and country, paid sick time, inclusive parental leave, paid holidays, a year-end Global Week of Rest, and volunteer days off.
• RSU stock grants, professional development and training opportunities, a monthly cell phone stipend, and mental health support.
• Virtual social events, free food, team-building activities, and a culture centered on ownership, curiosity, urgency, and inclusion.