Security Operations Lead

Security Operations LeadRemote - USACleo is seeking a Security Operations Lead to build, operate, and continuously improve our security detection, response, and operational resilience capabilities.This leader will be responsible for protecting Cleo's cloud infrastructure, SaaS platforms, endpoints, and corporate environment from evolving threats while ensuring operational stability and regulatory alignment.The ideal candidate is hands-on, technically deep, and capable of building scalable security operations in a high-growth SaaS environment.What You Will Be DoingSecurity Monitoring and DetectionOwn and evolve Cleo's detection and response strategyLead daily monitoring of security events across cloud, endpoint, identity, and application layersContinuously tune detection rules to reduce noise and improve signalEnsure effective coverage across AWS, SaaS platforms, and corporate systemsLeverage SIEM, EDR, and cloud-native tooling to improve visibilityIncident Response and ContainmentLead security incident investigations and coordinate cross-functional responseDevelop and maintain incident response playbooksConduct post-incident reviews focused on systemic improvementReduce mean time to detect and contain security eventsPartner with Legal, Compliance, and Leadership during material incidentsVulnerability and Exposure ManagementOversee vulnerability scanning across infrastructure, endpoints, and cloud resourcesPrioritize remediation based on business riskTrack critical vulnerability exposure windowsPartner with Engineering and IT to drive timely remediationCloud and Identity Security OperationsMonitor and secure AWS accounts and cloud-native servicesIdentify and remediate misconfigurationsStrengthen identity and access management controlsCollaborate with Cloud Security and Platform teams on guardrailsOperational Metrics and ReportingDefine and track security operations KPIsReport on detection efficacy, remediation timelines, and exposure trendsProvide board-ready operational risk metricsSupport audit and compliance evidence requirementsAutomation and Continuous ImprovementAutomate repetitive operational tasksImprove alert triage workflowsOptimize tooling effectiveness and cost efficiencyReduce operational friction through process refinementLeadership and CollaborationLead and mentor security analysts and engineersPartner closely with Engineering, IT, and Platform teamsContribute to the Security Champion and Guild initiativesBuild a culture of proactive risk identificationYour SkillsExperience in mid-market or high-growth SaaS environmentsExperience supporting SOC 2, ISO 27001, or similar auditsFamiliarity with MITRE ATT&CK frameworkExperience building or maturing security operations functionsRelevant certifications such as CISSP, GCIA, GCIH, or similarYour QualificationsEducationBachelor's degree required.Experience7years of experience in security operations, incident response, or detection engineeringStrong experience securing cloud-native SaaS environments, preferably AWSHands-on experience with SIEM, EDR, vulnerability management, and cloud security toolingDeep understanding of attacker techniques and threat detection methodologiesExperience leading incident response effortsStrong communication skills with the ability to translate technical risk into business impactA few things we have to offer:Compensation:$120,000 - $140,000Great Healthcare Dental VisionFlexible PTOCulture of support, encouraging Life-Work balance401k matchFSA and HSA optionsEmployee Assistance ProgramPaid Parental LeaveRepresenting a company with 4,000clients and a 99% retention rateAccelerated title and salary growth potentialA fun and energetic work environment that makes you excited to go to work every dayWe use artificial intelligence (AI) tools to assist in certain stages of our recruitment process, such as resume screening and candidate matching. These tools are designed to support fair and consistent evaluations. If you have questions about this process or would like to request an alternative assessment method, please contact us at [email protected] Communications US, LLC is an equal opportunity/affirmative action employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability status, protected veteran status, or any other characteristic protected by law.Create a Job AlertInterested in building your career at Cleo (US) ? Get future opportunities sent straight to your email. Experience: 7 years required