[Hiring] Senior Manager, Security Operations @Motive

Role Description

We are hiring a Senior Manager, Security Operations to build, lead and grow Motive's SOC. This is a founding leadership role — you will shape the team, the tooling, the detection strategy and the operating model rather than inheriting a mature organization and maintaining it. Reporting to the CISO, you will own the full detection and response lifecycle:

• detection engineering
• 24/7 incident response
• threat hunting
• threat intelligence
• security analytics
• endpoint and workload security

The scope spans Motive's entire estate:

• Product and production environments cover the cloud infrastructure, services, APIs and data platforms behind Fleet Management, Driver Safety, Spend Management, Workforce Management and AI Vision, plus the connected device fleet.
• Enterprise and corporate systems cover endpoints, identity and SSO, SaaS applications, network, email and internal tooling.

The mandate is coverage: we want to detect everything that goes wrong. Success looks like a small, senior, highly leveraged team whose time goes to hard problems, not queue processing.

What You’ll Do

• Stand up and grow the SOC — operating model, coverage structure, runbooks, escalation paths, hiring and career development for a globally distributed team.
• Own Motive's detection strategy and coverage posture across both estates, treating detection content as code.
• Extend detection into production and cloud workloads in close partnership with Platform Engineering.
• Own 24/7 incident response across product and enterprise environments.
• Own the security telemetry and analytics platform — collection, normalization, enrichment, retention and cost.
• Establish a structured, hypothesis-driven threat hunting program and a threat intelligence capability tailored to Motive's sector.
• Own EDR across the corporate fleet and runtime and workload protection for production.
• Own the operational side of phishing and social engineering defense.
• Architect the AI-first operating model for the SOC.

Qualifications

• 8+ years in security operations, incident response, detection engineering or threat intelligence, with 3+ years leading teams.
• Demonstrably hands-on experience in writing detections, running investigations, leading incidents, and building automation.
• Experience building or substantially rebuilding a SOC function.
• Credible across both estates — production and cloud security monitoring as well as corporate and enterprise security operations.
• Deep experience with modern detection and response tooling — SIEM, EDR, SOAR, and cloud-native telemetry.
• Strong background in cloud and container security monitoring, with AWS and Kubernetes strongly preferred.
• Solid grounding in identity-centric attack paths — SSO, OAuth, session compromise, MFA bypass and privilege escalation.
• Proven incident command experience on significant incidents, including executive communication under pressure.
• Concrete, demonstrated use of AI to run security operations.
• Experience building 24/7 coverage and leading globally distributed teams across multiple timezones.

Requirements

• Experience in transportation, logistics, IoT and connected devices, or critical infrastructure is a plus.

Benefits

• Health, pharmacy, optical and dental care benefits
• Paid time off
• Sick time off
• Short term and long term disability coverage
• Life insurance
• 401k contribution (all benefits are subject to eligibility requirements)

Pay Transparency

Your compensation may be based on several factors, including education, work experience, and certifications. The base compensation range for this role is: $140,000 — $200,000 USD.

Creating a diverse and inclusive workplace is one of Motive's core values. We are an equal opportunity employer and welcome people of different backgrounds, experiences, abilities and perspectives.