Security Operations Manager Jobs
Security Operations Manager jobs are open across defense, financial services, healthcare, technology, and critical infrastructure, at every level from team lead to director, with specializations in threat intelligence, incident response, and SOC leadership. Find a role that fits from the openings below and apply directly.
Find JobsLooking for remote work? View remote security operations manager jobs →Overview
Showing 5 of 777+ Security Operations Manager jobs
We are looking for an experienced Senior Security Operations (SecOps) Engineer to help define and drive the security strategy for applications, cloud infrastructure, and engineering platforms. We are particularly interested in a hands-on engineer who can build and integrate reusable security platforms, automation, and intelligent controls that make security proactive and scalable as software and AI-enabled systems evolve. You will serve as a senior technical security partner to application engineering, DevOps, Site Reliability Engineering, platform engineering, and Apple Information Security teams.
Sales and Operations Engineering is part of IS&T and drives the technology behind Apple's global operations, sales, and supply chain. The team connects the systems that move products from factory to customer - bridging sales platforms with the operational infrastructure that keeps Apple running at scale and ensuring Apple's technology and business priorities move in lockstep.
Description
In this role, you will lead complex security assessments and threat modeling, define scalable security controls, influence application and infrastructure architecture, and develop automation that enables security to be embedded throughout the software development lifecycle. You will identify systemic security risks and create engineering solutions that improve security across multiple applications and teams rather than relying on manual or application-specific controls. You will connect security signals to application ownership, business context, and engineering workflows so that teams can prioritize and remediate the risks that matter most.
You will combine deep security expertise with software, cloud, and infrastructure engineering experience to help teams design and operate secure systems at scale. You will also evaluate how AI-assisted and agentic workflows can responsibly improve security analysis, detection, triage, and remediation, while helping teams manage the new risks introduced by AI-enabled applications and agents.","responsibilities":"Lead security architecture reviews, threat modeling, and risk assessments for complex applications, platforms, cloud environments, and distributed systems.
Serve as a senior technical security advisor to application engineering, DevOps, SRE, platform engineering, and leadership teams.
Define security architecture patterns, engineering standards, reusable controls, and guardrails that can be adopted across multiple engineering organizations.
Identify security enforcement points across CI/CD pipelines, infrastructure-as-code, cloud platforms, Kubernetes, APIs, and application architectures.
Design and drive scalable DevSecOps capabilities including SAST, DAST, software composition analysis, container security, secrets scanning, supply-chain security, and policy enforcement.
Lead vulnerability management strategy including discovery, risk prioritization, remediation guidance, exception management, and executive-level reporting. Where practical, correlate findings with exploitability, asset exposure, application criticality, and ownership to support actionable prioritization.
Partner with designated incident-response and Information Security teams on significant security incidents, partnering with engineering and Information Security teams on containment, remediation, root cause analysis, and preventative controls.
Develop or guide development of security tooling, automation, and services using Python, Go, APIs, infrastructure-as-code, or similar technologies. Own hands-on implementation of selected integrations and production-quality security automation, not solely advisory design.
Identify opportunities to replace manual security processes with automated controls and self-service security capabilities.
Evaluate security architecture for AWS/GCP services, Kubernetes platforms, containerized workloads, networking, IAM, secrets management, and multi-tenant systems.
Partner with engineering teams early in product and system design to identify risks before deployment rather than relying primarily on post-production detection.
Establish security metrics and risk indicators that provide leadership visibility into application and infrastructure security posture. Emphasize coverage, time to remediate critical exposures, control effectiveness, and measurable risk reduction-not just raw vulnerability counts.
Evaluate new security technologies and lead technical proofs of concept and adoption decisions. Favor interoperability and maintainability over introducing isolated tools.
Mentor engineers and raise security engineering expertise across SecOps, DevOps, SRE, and application engineering teams.
Influence security direction across organizational boundaries without requiring direct management authority.
Design, prototype, and selectively integrate AI-assisted or agentic capabilities for vulnerability analysis, security reviews, incident investigation, and remediation recommendations. Evaluate accuracy and operational value, with least-privilege access, auditability, and human approval for consequential actions.
Build integrations across source control, CI/CD, security scanners, asset inventories, observability, and engineering ticketing systems to turn fragmented findings into actionable workflows.
Help assess AI/LLM application and agent risks, including prompt injection, untrusted tool outputs, sensitive-data exposure, and excessive permissions, in collaboration with Information Security and application teams.
Preferred Qualifications
Experience securing cloud-native applications and workloads including Kubernetes, containers, APIs, and modern distributed architectures.
Strong experience integrating security controls into CI/CD pipelines and infrastructure-as-code workflows.
Practical experience integrating or operating several security testing and posture capabilities (e.g., SAST, DAST, SCA, secrets scanning, container security, or CSPM), with judgment about which controls are useful in different workflows.
Demonstrated experience designing or developing security automation using Python, Go, Java, Bash, or another programming language. Experience building APIs or integrations across security and engineering systems is particularly valuable.
Experience leading vulnerability assessment, prioritization, remediation, and risk-management activities across multiple engineering teams.
Ability to translate complex technical security risks into actionable recommendations for engineers, managers, and senior leadership.
Demonstrated ability to influence architecture and security outcomes across multiple engineering organizations.
Experience building or integrating reusable security controls, automation, or self-service capabilities adopted by more than one team.
Ability to take an ambiguous security problem from design through a working, maintainable technical solution.
Experience participating in or leading security incident response, investigation, root cause analysis, and preventative remediation.
Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Security, or equivalent practical experience.
Advanced Kubernetes or multi-tenant cloud security experience.
Experience identifying security enforcement opportunities within Terraform, CloudFormation, CI/CD systems, Kubernetes admission controls, or similar platforms.
Strong knowledge of threat modeling methodologies, offensive security techniques, application penetration testing, and secure architecture principles.
Experience with security tooling and platforms for vulnerability management, SAST/DAST, secrets management, runtime security, SIEM, and cloud security.
Experience with Splunk, OpenSearch, Prometheus, Grafana, or similar observability and security analytics technologies.
Understanding of software supply-chain security, SBOM, artifact signing, provenance, dependency security, and secure build pipelines.
Experience designing security metrics, risk scoring models, dashboards, and executive-level security reporting.
Experience securing AI/ML workloads, LLM applications, model pipelines, or agent-based systems.
Experience building or directing the use of AI/ML or agentic security tooling to scale security assessment, vulnerability analysis, incident investigation, or remediation.
Contributions to the broader security community through security research, CVEs, bug-bounty findings, open-source projects, conference presentations, or technical publications.
Relevant security certifications (e.g., CISSP, CCSP, CSSLP) are a plus, but not a substitute for hands-on engineering experience.
Minimum Qualifications
8+ years of experience in security engineering, application security, cloud security, DevSecOps, infrastructure security, security operations, or a related engineering discipline.
8+ years of experience leading security reviews, threat modeling, risk assessments, and remediation of complex distributed or cloud-native systems.
8+ years of experience in application security, cloud security, identity and access management, network security, vulnerability management, and secure software development.
5+ years of experience in securing production environments in AWS, GCP, or another major cloud platform.
5+ years of experience in programming or automation experience (for example Python, Go, or Java), including building integrations, services, or repeatable engineering workflows.
5+ years of experience in integrating security capabilities into at least one of CI/CD, developer workflows, infrastructure-as-code, or production engineering systems.
Bachelors Degree in Computer Science or equivalent experience.
We are looking for an experienced Senior Security Operations (SecOps) Engineer to help define and drive the security strategy for applications, cloud infrastructure, and engineering platforms. We are particularly interested in a hands-on engineer who can build and integrate reusable security platforms, automation, and intelligent controls that make security proactive and scalable as software and AI-enabled systems evolve. You will serve as a senior technical security partner to application engineering, DevOps, Site Reliability Engineering, platform engineering, and Apple Information Security teams.
Sales and Operations Engineering is part of IS&T and drives the technology behind Apple's global operations, sales, and supply chain. The team connects the systems that move products from factory to customer - bridging sales platforms with the operational infrastructure that keeps Apple running at scale and ensuring Apple's technology and business priorities move in lockstep.
Description
In this role, you will lead complex security assessments and threat modeling, define scalable security controls, influence application and infrastructure architecture, and develop automation that enables security to be embedded throughout the software development lifecycle. You will identify systemic security risks and create engineering solutions that improve security across multiple applications and teams rather than relying on manual or application-specific controls. You will connect security signals to application ownership, business context, and engineering workflows so that teams can prioritize and remediate the risks that matter most.
You will combine deep security expertise with software, cloud, and infrastructure engineering experience to help teams design and operate secure systems at scale. You will also evaluate how AI-assisted and agentic workflows can responsibly improve security analysis, detection, triage, and remediation, while helping teams manage the new risks introduced by AI-enabled applications and agents.","responsibilities":"Lead security architecture reviews, threat modeling, and risk assessments for complex applications, platforms, cloud environments, and distributed systems.
Serve as a senior technical security advisor to application engineering, DevOps, SRE, platform engineering, and leadership teams.
Define security architecture patterns, engineering standards, reusable controls, and guardrails that can be adopted across multiple engineering organizations.
Identify security enforcement points across CI/CD pipelines, infrastructure-as-code, cloud platforms, Kubernetes, APIs, and application architectures.
Design and drive scalable DevSecOps capabilities including SAST, DAST, software composition analysis, container security, secrets scanning, supply-chain security, and policy enforcement.
Lead vulnerability management strategy including discovery, risk prioritization, remediation guidance, exception management, and executive-level reporting. Where practical, correlate findings with exploitability, asset exposure, application criticality, and ownership to support actionable prioritization.
Partner with designated incident-response and Information Security teams on significant security incidents, partnering with engineering and Information Security teams on containment, remediation, root cause analysis, and preventative controls.
Develop or guide development of security tooling, automation, and services using Python, Go, APIs, infrastructure-as-code, or similar technologies. Own hands-on implementation of selected integrations and production-quality security automation, not solely advisory design.
Identify opportunities to replace manual security processes with automated controls and self-service security capabilities.
Evaluate security architecture for AWS/GCP services, Kubernetes platforms, containerized workloads, networking, IAM, secrets management, and multi-tenant systems.
Partner with engineering teams early in product and system design to identify risks before deployment rather than relying primarily on post-production detection.
Establish security metrics and risk indicators that provide leadership visibility into application and infrastructure security posture. Emphasize coverage, time to remediate critical exposures, control effectiveness, and measurable risk reduction-not just raw vulnerability counts.
Evaluate new security technologies and lead technical proofs of concept and adoption decisions. Favor interoperability and maintainability over introducing isolated tools.
Mentor engineers and raise security engineering expertise across SecOps, DevOps, SRE, and application engineering teams.
Influence security direction across organizational boundaries without requiring direct management authority.
Design, prototype, and selectively integrate AI-assisted or agentic capabilities for vulnerability analysis, security reviews, incident investigation, and remediation recommendations. Evaluate accuracy and operational value, with least-privilege access, auditability, and human approval for consequential actions.
Build integrations across source control, CI/CD, security scanners, asset inventories, observability, and engineering ticketing systems to turn fragmented findings into actionable workflows.
Help assess AI/LLM application and agent risks, including prompt injection, untrusted tool outputs, sensitive-data exposure, and excessive permissions, in collaboration with Information Security and application teams.
Preferred Qualifications
Experience securing cloud-native applications and workloads including Kubernetes, containers, APIs, and modern distributed architectures.
Strong experience integrating security controls into CI/CD pipelines and infrastructure-as-code workflows.
Practical experience integrating or operating several security testing and posture capabilities (e.g., SAST, DAST, SCA, secrets scanning, container security, or CSPM), with judgment about which controls are useful in different workflows.
Demonstrated experience designing or developing security automation using Python, Go, Java, Bash, or another programming language. Experience building APIs or integrations across security and engineering systems is particularly valuable.
Experience leading vulnerability assessment, prioritization, remediation, and risk-management activities across multiple engineering teams.
Ability to translate complex technical security risks into actionable recommendations for engineers, managers, and senior leadership.
Demonstrated ability to influence architecture and security outcomes across multiple engineering organizations.
Experience building or integrating reusable security controls, automation, or self-service capabilities adopted by more than one team.
Ability to take an ambiguous security problem from design through a working, maintainable technical solution.
Experience participating in or leading security incident response, investigation, root cause analysis, and preventative remediation.
Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Security, or equivalent practical experience.
Advanced Kubernetes or multi-tenant cloud security experience.
Experience identifying security enforcement opportunities within Terraform, CloudFormation, CI/CD systems, Kubernetes admission controls, or similar platforms.
Strong knowledge of threat modeling methodologies, offensive security techniques, application penetration testing, and secure architecture principles.
Experience with security tooling and platforms for vulnerability management, SAST/DAST, secrets management, runtime security, SIEM, and cloud security.
Experience with Splunk, OpenSearch, Prometheus, Grafana, or similar observability and security analytics technologies.
Understanding of software supply-chain security, SBOM, artifact signing, provenance, dependency security, and secure build pipelines.
Experience designing security metrics, risk scoring models, dashboards, and executive-level security reporting.
Experience securing AI/ML workloads, LLM applications, model pipelines, or agent-based systems.
Experience building or directing the use of AI/ML or agentic security tooling to scale security assessment, vulnerability analysis, incident investigation, or remediation.
Contributions to the broader security community through security research, CVEs, bug-bounty findings, open-source projects, conference presentations, or technical publications.
Relevant security certifications (e.g., CISSP, CCSP, CSSLP) are a plus, but not a substitute for hands-on engineering experience.
Minimum Qualifications
8+ years of experience in security engineering, application security, cloud security, DevSecOps, infrastructure security, security operations, or a related engineering discipline.
8+ years of experience leading security reviews, threat modeling, risk assessments, and remediation of complex distributed or cloud-native systems.
8+ years of experience in application security, cloud security, identity and access management, network security, vulnerability management, and secure software development.
5+ years of experience in securing production environments in AWS, GCP, or another major cloud platform.
5+ years of experience in programming or automation experience (for example Python, Go, or Java), including building integrations, services, or repeatable engineering workflows.
5+ years of experience in integrating security capabilities into at least one of CI/CD, developer workflows, infrastructure-as-code, or production engineering systems.
Bachelors Degree in Computer Science or equivalent experience.
Security Operations Manager Jobs by Experience Level
See All 777+ Security Operations Manager Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsSecurity Operations Manager Job Market
Who's Hiring
- Allied Universal202
- Planate Management14
- Lockheed Martin13
- Oracle6
- DSI Security Services6
Top Industries Hiring
- Technology & Software15
- Banking & Financial Services6
- Investment & Asset Management4
- Insurance3
- Electronics & Hardware3
What Employers Look For
The qualifications that appear most often in security operations manager jobs.
- 5+ years of experience in security operations or a related cybersecurity discipline
- Hands-on experience managing a SOC team and overseeing 24/7 monitoring operations
- Proficiency with SIEM platforms such as Splunk, Microsoft Sentinel, or IBM QRadar
- CISSP, CISM, or equivalent advanced security certification strongly preferred
- Demonstrated ability to lead incident response efforts and manage post-incident reviews
- Bachelor's degree in information security, computer science, or a related field
Tips for Your Security Operations Manager Job Search
Tailor your resume to each SOC environment
Hiring managers distinguish between 24/7 SOC operations, hybrid IT/OT environments, and cloud-native security stacks. Call out which environment you've managed, the team size you've led, and the SIEM or SOAR platforms you've run daily.
Apply early to roles that fit
Migrate Mate lists security operations manager openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Lead with metrics your interviewers will recognize
Quantify mean time to detect and mean time to respond improvements you drove, escalation-to-closure ratios, and analyst retention under your leadership. Hiring committees for this role weigh operational outcomes heavily alongside technical credentials.
Target postings that match your certification level
Many listings list CISSP, CISM, or GIAC certifications as requirements, not preferences. Filter for postings that align with credentials you already hold so your application clears the initial screen before a recruiter reviews it.
Prepare for a technical and leadership interview in the same loop
Most security operations manager interview processes include a scenario round on incident triage or escalation decisions alongside a behavioral round on managing analyst burnout and stakeholder communication. Practice both formats before your first screen.
Negotiate scope before you negotiate compensation
Clarify headcount authority, tool procurement ownership, and reporting structure before discussing an offer. Security operations manager roles vary widely in actual decision-making power, and misalignment on scope is the most common reason new hires leave within the first year.
Security Operations Manager Jobs: Frequently Asked Questions
Which companies are hiring the most security operations managers?
The companies hiring the most security operations managers right now include Allied Universal, Planate Management, and Lockheed Martin, with the largest share of openings in California, Texas, and Virginia, based on current listings on Migrate Mate as of November 2026. Defense contractors, large financial institutions, and managed security service providers consistently post the highest volume of these roles.
How many security operations manager jobs are remote?
About 61% of security operations manager openings are fully remote or hybrid as of November 2026, with remote availability concentrated in roles focused on cloud security, threat intelligence program management, and policy or compliance oversight rather than on-site SOC floor leadership, which more commonly requires a physical presence.
How do you become a security operations manager?
Most security operations managers move up from analyst or senior analyst roles, building hands-on experience with incident response, threat detection, and SIEM administration. From there, taking on shift lead or team lead responsibilities demonstrates the management readiness employers look for. Earning a CISSP or CISM while in a senior analyst role accelerates the transition significantly.
Can I get a security operations manager job without direct management experience?
Yes, but you'll need to reframe your background carefully. Employers hiring first-time managers often accept candidates who led incident response bridges, mentored junior analysts, or owned a detection engineering program without a formal title. Documenting those leadership moments concretely in your resume and cover letter closes most of the experience gap.
What does the security operations manager interview process look like?
Most processes run three to four rounds: an initial recruiter screen, a hiring manager conversation focused on your SOC leadership philosophy and incident response approach, a technical or scenario round where you walk through a simulated escalation, and a final round with a CISO or senior stakeholder. Some employers also include a short take-home case study on SOC maturity or tooling gaps.
Where can I find and apply to security operations manager jobs?
You can find and apply to security operations manager jobs on Migrate Mate, which lists current openings from across the United States. Find the roles that match your background and apply directly to each listing from the same page.
See All 777+ Security Operations Manager Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs