Sr. Manager, Detection and Response

Overview

Job Posting Title: Leader – Security Operations and Incident Response

 

Location: On-Site - Santa Ana, California

 

Compensation: Starting at $150,000/year+ D.O.E

*Actual compensation may vary from posting based on geographic location, work experience, education, and/or skill level.

 

Position Summary:

The Leader – Security Operations and Incident Response is responsible for leading and maturing New American Funding’s enterprise cyber defense capabilities. This role blends strategic leadership with deep technical expertise in security operations, monitoring, detection engineering, and incident response.

 

As a senior-level leader, you will oversee day-to-day SOC operations, drive program maturity, and serve as the executive incident commander during high-impact cyber events. You will lead a team of analysts, engineers, and responders while partnering with cross-functional business, IT, and executive stakeholders to ensure a resilient security posture across the organization.

 

The Leader – Security Operations and Incident Response plays a critical role in safeguarding sensitive mortgage, financial, and customer data, and ensuring compliance within a highly regulated environment.

 

*Disclaimer: Identity Verification checks are in place throughout the Candidate journey to prevent candidate fraud  

Responsibilities

Security Operations Leadership

· Lead and oversee daily operations of the Security Operations Center (SOC), ensuring timely and accurate detection, triage, and response to cybersecurity threats.

· Direct the management and optimization of security monitoring technologies (SIEM, EDR, IDS/IPS, NDR, DLP, and cloud monitoring).

· Define, maintain, and govern SOC processes, playbooks, and escalation procedures.

· Collaborate with IT, DevOps, engineering, network, and cloud teams to advance enterprise-wide security monitoring and visibility.

· Track, measure, and communicate SOC operational metrics, threat trends, and risk reduction to senior leadership.

· Leverage SOAR to automate repetitive tasks, standardize incident-response workflows, and free security teams to focus on higher-value, complex threats.

· Map SIEM detections, correlation rules, and behavioral analytics to MITRE ATT&CK, Cyber Kill Chain, and other threat-modeling frameworks to ensure comprehensive coverage and structured response.

· Lead detection engineering efforts by building high-fidelity alerts, tuning correlation logic, and aligning detection use cases to adversary TTPs, threat intelligence, and organizational risk priorities.

 

Incident Response Leadership

· Serve as Incident commander, leading enterprise-wide containment, eradication, and recovery during critical cybersecurity incidents.

· Oversee development, testing, and enhancement of the incident response plan, including tabletop exercises, simulations, and red/blue team engagements.

· Direct forensic investigations, malware analysis, threat hunting operations, and root-cause analysis activities.

· Provide executive communication and status updates during cyber incidents, ensuring clarity, transparency, and effective crisis management.

· Ensure incidents are documented, lessons learned are captured, and improvements are incorporated back into people, process, and technology.

 

Strategic Contributions

· Drive the strategic maturity of security operations and incident response programs aligned with NIST CSF, MITRE ATT&CK, CIS Controls, ISO, and other frameworks.

· Ensure SOC and IR practices comply with financial services regulatory requirements (GLBA, PCI DSS, FFIEC, NYDFS, HIPAA, SOX).

· Mentor, develop, and coach SOC analysts, incident responders, and engineers to build a high-performing and continuously improving organization.

· Evaluate and recommend emerging technologies, security tools, and operational enhancements to strengthen the cyber defense roadmap.

· Act as a trusted advisor to executive leadership on operational risk, cyber resilience, and incident readiness

Qualifications

· 10+ years of progressive experience in cybersecurity operations, SOC leadership, or incident response roles.

· 5+ years of leadership or management experience overseeing SOC, IR, or cyber defense teams.

· Demonstrated success in building, scaling, and maturing security operations programs.

· Advanced expertise with SIEM, SOAR, EDR, NDR, IDS/IPS, forensic tools, and threat analysis methodologies.

· Deep understanding of attacker tactics, threat intelligence, and the MITRE ATT&CK framework.

· Experi