Security Operations Manager

About 66degrees

Role overview

Security monitoring and incident response

• Manage daily operations for SIEM, EDR/XDR, email security, cloud security, and endpoint security posture management.
• Lead the investigation, containment, remediation, and post-incident review of security events.
• Develop and maintain security playbooks and standard operating procedures.

Vulnerability and posture management

• Conduct vulnerability scanning and coordinate remediation across endpoints, networks, and cloud environments including GCP, Azure, and AWS.
• Enforce and refine Zero Trust, Device Trust, Browser Trust, and IAM policies.
• Harden business applications including Google Workspace, Google Cloud Platform, Slack, Salesforce, and Rippling.

Leadership and global enablement

• Act as the security subject matter expert and escalation point for the India-based IT Service Desk and global teams.
• Train teams on Tier 1 security triage for phishing, malware alerts, and account lockouts.
• Lead security awareness training and simulated phishing campaigns.

Compliance and risk

• Lead GRC and Trust Center buildout, evidence gathering, and control enforcement for SOC 2 and ISO 27001 compliance.
• Complete client security questionnaires and vendor risk assessments with go-to-market and legal teams.
• Report SecOps metrics to IT leadership.

Required qualifications

• 8-12 or more years of progressive information security, IT security, or security operations experience, including 2-3 years in a team lead or management capacity.
• Deep Google Workspace administration and security knowledge, plus Google Cloud Platform security experience.
• Hands-on experience with EDR, SIEM, and IAM platforms.
• Experience supporting SOC 2 Type II or ISO 27001 audits and managing a GRC platform.
• Scripting proficiency in Python, PowerShell, Bash, or Google Apps Script.
• Excellent English communication skills across time zones and cultural contexts.

Preferred qualifications

• Industry-recognized security certifications such as Security+, CISSP, CISM, CCSP, or GCIA are preferred.
• Google Cloud Professional Cloud Security Engineer and Google Cybersecurity Certificate credentials are highly desired.
• Professional services, consulting, managed services, or at-scale internal security team experience is preferred.

Application notes

• The employer states that it cannot sponsor or transfer visas at this time.