Manager Security Engineer, Operations

Leads security operations, incident detection and response for Fivetran, which is combining with dbt Labs, covering both its multi-tenant data platform and the wider enterprise. The role is a hands-on people-leadership post, remote in the US on Eastern time, and is the accountable leader for incident response across the company.

The manager builds and develops a team of detection and response engineers and analysts, setting its structure, on-call rotations and hiring plan. The role owns enterprise incident response from investigation and containment through remediation and post-incident review, acting as incident commander on major events alongside Legal, Privacy, Communications and executives, and leads customer-impacting incidents and notifications. It covers detection engineering across cloud, identity, endpoint, SaaS and application layers using MITRE ATT&CK, detection and response designed around tenant isolation and customer data, use of LLMs and AI agents to automate triage and investigation, detections for threats to AI systems, threat hunting and intelligence, and ownership of the SIEM, SOAR, EDR and cloud detection stack with its roadmap, budget and vendors. MTTD and MTTR reporting, automation and playbooks round out the job.

Fivetran wants deep incident response experience including enterprise-wide leadership, a record of managing and hiring security teams, extensive multi-tenant SaaS security work, hands-on use of AI in security operations, and strong AWS, GCP or Azure and Kubernetes skills. The stack includes CrowdStrike, Okta, Google Workspace and Wiz.