Semrush

Senior Manager, Security Operations

Semrush

full-time

Posted on:

Location Type: Remote

Location: Anywhere in Europe

Visit company website

Explore more

AI Apply
Apply

Job Level

About the role

  • Own and continuously improve the Security Incident Response process end-to-end.
  • Act as Incident Commander for high-severity security incidents.
  • Serve as Security Lead in cross-functional incidents with a security impact.
  • Ensure clear coordination, communication, and stakeholder alignment during incidents.
  • Own post-incident reviews, including root cause analysis, action item definition, and tracking to completion.
  • Maintain and evolve incident documentation standards, runbooks governance, and response playbooks oversight.
  • Ensure appropriate escalation handling for high-severity incidents outside business hours on a best-effort basis.
  • Own the Security Monitoring process, ensuring alert quality, signal-to-noise balance, and operational efficiency.
  • Oversee Detection Engineering as a managed process, including prioritization, quality control, and alignment with threat landscape.
  • Ensure effective integration of Threat Intelligence into detection and response workflows.
  • Own Log Management from an operational perspective, including logging requirements, coverage, ingestion health, and data quality oversight.
  • Coordinate response to logging-related incidents affecting monitoring capabilities.
  • Own the SOC operational metrics framework, be accountable for key performance indicators including: Alert response times (MTTA), Mean Time to Contain and incident lifecycle efficiency, Incident SLO adherence, Alert quality and false positive reduction, Monitoring coverage and logging health indicators.
  • Drive metric-based prioritization and improvements across SOC processes.
  • Provide structured reporting to leadership on SOC performance and risks.
  • Lead a lean SOC team composed of Analysts and a Security Data Engineer.
  • Conduct performance reviews and regular one-to-ones.
  • Own individual development plans and learning roadmaps for team members.
  • Manage hiring, onboarding, staffing, and workload planning.
  • Ensure sustainable coverage model and operational resilience.
  • Conduct tabletop exercises and ensure team readiness for high-severity events.
  • Own the SOC operational roadmap and backlog.
  • Prioritize initiatives based on risk, impact, and available resources.
  • Manage operational trade-offs in a resource-constrained environment.
  • Collaborate with internal stakeholders across Engineering, Product, and Corporate functions.
  • Participate in vendor relationship oversight within the SOC technology stack.
  • Support external audits such as SOC 2 and PCI DSS from an operational perspective, including process explanation and evidence coordination.

Requirements

  • Strong experience in Security Operations and Incident Response management.
  • Demonstrated experience coordinating high-severity security incidents.
  • Solid understanding of Security Monitoring, Detection Engineering, and Log Management processes.
  • Deep familiarity with SIEM platforms and security monitoring ecosystems.
  • Strong understanding of alert lifecycle management and signal optimization.
  • Experience working with threat intelligence integrations.
  • Proven ability to operate in metric-driven operational environments.
  • Experience interacting with auditors and supporting compliance processes such as SOC 2 or PCI DSS.
  • Ability to manage processes end-to-end in a lean operational setting.
Benefits
  • Unlimited PTO
  • Hobby & team building budget allowance
  • Employee Support Program
  • Loss of family member financial aid
  • Employee Resource Groups
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools
Security Incident ResponseIncident CommandRoot Cause AnalysisThreat Intelligence IntegrationLog ManagementDetection EngineeringAlert Lifecycle ManagementMetric-driven OperationsPerformance MetricsOperational Resilience
Soft Skills
CoordinationCommunicationStakeholder AlignmentLeadershipTeam ManagementPerformance ReviewsWorkload PlanningCollaborationProblem SolvingPrioritization
Certifications
SOC 2PCI DSS