[Hiring] Security Operations Lead @Mend.io

Role Description

Mend is looking for a hands-on Security Operations Lead to drive security operations across our cloud infrastructure, product, compliance, and customer-facing activities. You will work closely with Engineering, Product, IT, Sales, Legal, and company leadership to identify risks, improve controls, respond to security issues, and strengthen Mend’s overall security posture.

• Assess security risks across Mend’s product and cloud infrastructure and drive a prioritized improvement plan.
• Own day-to-day cloud and infrastructure security operations, including SIEM/SOC monitoring, WAF, CSPM, access reviews, encryption, and secrets management.
• Lead vulnerability management, including Mend’s HackerOne bug bounty program and remediation coordination with Engineering.
• Lead security incident response and support disaster recovery planning and testing.
• Support customer-facing security activities, including questionnaires, RFPs, and technical security discussions during sales cycles.
• Drive audit and certification activities, including SOC 2 and ISO 27001/27701/27017, and maintain compliance controls and evidence through Drata.
• Manage third-party security assessments and support security and AI governance.
• Serve as a key internal security advisor for teams across the company.
• Own and improve security tooling, automation, and operational processes.

Qualifications

• Strong experience in Security Operations, Cloud Security, Product Security, or a similar role.
• Hands-on experience with cloud security technologies, vulnerability management, incident response, SIEM, WAF, CSPM, and IAM.
• Experience working closely with Engineering and Product teams.
• Familiarity with SOC 2, ISO 27001, and security compliance frameworks.
• Strong analytical, communication, and cross-functional collaboration skills.
• A practical, hands-on approach with the ability to balance security risk and business needs.

Company Description

At Mend.io, we are leading the way in securing AI-powered applications, and we believe the best innovations come from teams where everyone feels valued. We are committed to a workplace built on respect, trust, and growth, where learning and flexibility empower people to do their best work.