Security & Threat Operations Manager, DriveWealth
$200-250k
More information about location
Cloud-based, API-driven brokerage infrastructure
Be an early applicant
Cloud-based, API-driven brokerage infrastructure
201-500 employees
Be an early applicant
$200-250k
More information about location
201-500 employees
Company mission
To make investing accessible to anyone, anywhere.
Role
Who you are
- 10+ years in security operations, detection engineering, incident response, or related disciplines, including 3+ years managing technical teams and experience building or maturing an operations function
- Demonstrated experience serving as Incident Commander during significant security incidents, making decisions under pressure, coordinating multiple teams, and communicating clearly with executives and business stakeholders
- Strong hands-on expertise in threat intelligence, detection content development, SIEM and endpoint analytics, investigation, threat hunting, and defensive validation
- Practical scripting or query skills in Python, SQL, or comparable languages
- Working knowledge of AWS, Kubernetes, API security, identity, and Windows/macOS endpoint telemetry. Experience supporting production environments with demanding availability and latency requirements is preferred
- Experience creating, operating, and tuning preventive controls such as DLP, WAF, and email filtering while managing false positives and business impact
- Experience investigating insider threats and digital risks such as exposed credentials, impersonation, and phishing domains, with appropriate handling of sensitive information and coordination with HR and Legal
- Strong people leadership, process design, and prioritization skills, with the ability to influence Engineering and IT, manage competing operational demands, and support on-call escalation and incident response outside normal business hours
- Familiarity with NIST CSF, incident response practices, and MITRE ATT&CK. Experience in regulated financial services, including SEC/FINRA environments and applicable incident, data protection, and recordkeeping obligations, is preferred
- Bachelor’s degree in a related field or equivalent practical experience. Relevant certifications such as CISSP, GCIH, GCIA, or GCFA are a plus
What the job involves
- DriveWealth LLC is seeking a highly motivated and experienced Security & Threat Operations Manager to build and mature the function protecting our brokerage platform and corporate environment
- Reporting to the Chief Information Security Officer, you will grow and lead the team, establish its operating model and roadmap, and deliver measurable improvements in threat detection, investigation, incident response, and exposure management
- In this hands-on leadership role, you will own detection content and the exposure management lifecycle, security monitoring and incident response, operation and tuning of security controls, and turn threat intelligence into defensive improvements
- You will act as Incident Commander during significant security incidents and coordinate response across technical and business teams
- Partnering with Security Engineering, DevOps & Platform, and Product & Engineering, you will ensure defenses evolve along with our AWS platform, Kubernetes services, low-latency trading infrastructure, and corporate technology within an innovative and entrepreneurial culture
- Program Development: Mature Security & Threat Operations through a measurable roadmap, defined operating model, appropriate monitoring coverage, escalation procedures, and service provider oversight
- Team Development: Grow and lead the team through hiring, coaching, training, career development, and performance management
- Detection Engineering: Own the detection program incorporating threat intelligence, content development, proactive hunting, and validation through attack simulations and purple-team exercises. Treat detection content development as an engineering discipline
- Monitoring & Investigation: Own security monitoring and investigation across product and corporate environments, including phishing, malware, credential compromise, API abuse, DDoS, and insider threats
- Digital Risk Monitoring: Own digital risk monitoring covering external attack surfaces, leaked credentials, exposed data, impersonation, phishing domains, and takedown coordination
- Automated Response: Partner with Security Engineering to build pre-defined automated security response actions. Coordinate with business leaders on required response actions which cannot be automated or which require compensating actions to prevent unnecessary business disruption
- Incident Management: Own the incident response lifecycle as Incident Commander, including preparedness, forensic evidence handling, containment, recovery validation, regulatory coordination, and post-incident improvement
- Exposure Management: Own the exposure management lifecycle from discovery through verified closure, coordinating remediation with accountable system and product owners
- Control Operations: Own the operation and tuning of operational security controls, such as DLP, WAF, email filtering, and identity compromise prevention in partnership with Security Engineering, DevOps & Platform, and Product & Engineering to meet evolving product and corporate technology requirements
- Regulatory Controls: Partner with Legal, Compliance, Security Engineering and GRC to implement SEC and FINRA requirements, including SEC Rule 17a-3 and 17a-4 controls supporting record capture, preservation, integrity, access, and retrieval
- Control Assurance: Partner with Security Engineering to automate control validation and evidence collection. Support audits and regulatory examinations, and drive remediation of technical findings
Our take
Robo-advisory products and fractional share trading have expanded the investment industry's reach, attracting a broader audience than ever before. This shift has necessitated a redesign of the fintech industry's infrastructure to meet the growing demand for accessible, efficient investment options.
DriveWealth plays a pivotal role in this transformation by developing APIs that serve over 100 global fintechs, challenger banks, and digital wallets. Its infrastructure enables seamless robo-advisory services and fractional-share trading, giving retail investors access to US markets and offering innovative stock-reward programs. Among its partners are notable companies like Revolut, MoneyLion, and Hemista.
As the company continues to grow, it remains focused on scaling its business by enhancing its technology stack, pursuing strategic acquisitions, and expanding its team. It is well on its way to its ultimate goal of providing tools that empower companies to create investment products that are both accessible and convenient for everyone.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-9% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Aug 2021
$450m
SERIES D
Oct 2020
$56.7m
SERIES C
Total funding: $552.8m
Company benefits
- Health & wellness packages: We’ve built our benefits offering as a holistic package. We provide multiple health insurance carrier options and plans (medical, dental, vision) with access to HSA and/or FSA tax savings tools. We also provide income protection including life insurance, AD&D, short- and long-term disability, as well as extended coverage resources such as fertility benefits and mental wellness resources
- Vacation & time off: To build a successful organization, employees need time away to rest and recharge, so we provide paid time off including paid holidays and unlimited vacation time. We also strongly believe in work-life balance and, therefore, offer fully remote and hybrid work positions based on role requirements
- Professional developmnet: We believe one of the greatest contributions we can make is investing in our employees’ professional development. Therefore, we offer financial support toward continuing education courses, academic coursework, professional conferences, earning professional certifications, and membership fees to professional organizations
Company HQ
Financial District, New York, NY
Leadership
Naureen Hassan
(CEO)Previously President of the Americas at UBS, was on the Board of Governors at FINRA and Partnership For New York City and was the First Vice President of the Federal Reserve Bank of New York.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 8 more jobs at DriveWealth