[Hiring] Senior Manager, Security Engineering & Operations @J.D. Power

Role Description

The Senior Manager will lead a combined Security Engineering and Operations function for North America, overseeing vulnerability management, incident response, threat hunting, and hands-on security engineering. This role requires both operational discipline and technical credibility.

• Lead and develop the Security Operations Engineer, Senior Security Engineer, and Security Engineers; build high-performing teams and coaching culture.
• Establish vulnerability management program with our partners, defining SLAs, tracking mechanisms, remediation governance, and executive reporting.
• Design and maintain enterprise incident response procedures, playbooks, escalation paths, and threat intelligence integration.
• Oversee 24x7 on-call rotation, work with HR and operations to improve sustainability, and reduce burnout while maintaining response quality.
• Manage the transition from crisis response mode to strategic engineering focus and modernization work.
• Develop KPIs for detection, response, and remediation; report quarterly to CISO on team metrics and program health.
• Lead hands-on security engineering projects including infrastructure hardening, threat hunting, and controls validation.
• Interface with Cloud Platform, Infrastructure, and Development teams to embed security into engineering practices.
• Mentor team on automation, scripting, and process improvement to reduce manual toil.

Qualifications

• 12+ years in security operations, incident response, or security engineering roles with hands-on technical depth.
• 7+ years managing security teams of 5+ engineers with demonstrated team development and coaching ability.
• Hands-on experience with SIEM, vulnerability scanning, remediation tracking, and detection rule development.
• Proven track record transitioning teams from reactive incident response to proactive threat hunting and engineering.
• Experience managing managed security service provider (MSSP) or managed vulnerability service engagements.
• Strong leadership ability; commitment to team development, sustainability, and psychological safety.

Preferred Qualifications

• CISSP, CISM, or CEH certification.
• Experience with Nessus, Qualys, or similar vulnerability management platforms.
• Background in incident response program maturity, metrics, and automation.
• Experience scaling security operations in growth-stage organizations.

Benefits

• This position has a starting salary range of $130,000 - $170,000 CAD / $160,000 - $200,000 USD per year.
• Eligible employees may participate in medical, dental, vision, disability, life insurance, retirement savings programs, paid time off, wellness programs, and other company-sponsored benefits.

Company Description

JD Power powers auto-related decisions through proprietary data, advanced analytics, deep industry expertise, and workflows that connect insight to action. Operating across North America, Europe, and Australia, we help customers make better decisions and achieve better outcomes.

• As a virtual-first company, we offer flexible work arrangements, opportunities for learning and development, and a culture centered on the Values that guide how we work every day.
• We power our customers’ success.
• We are innovative, collaborative, and grounded in data.
• We make things easy.
• We get it done.
• We start with trust and prove it every day.