Back to jobs

Security Operations Team Lead

CyeraRemote (United States)Posted 2w ago
SOC Analyst
USD 150000-225000 per annual
Full Time
Remote
Craft my tailored resume free

Free to start · No card

Job description

Description

WHO WE ARE

Come join the company at the center of how the world adopts AI securely. Cyera’s mission is to give enterprises the confidence to embrace AI safely — deciding exactly what it can see and do as it reaches deeper into the business. We started by solving the hardest problem in data security: finding and securing data faster and more precisely than anyone thought possible. That foundation is now the essential AI trust infrastructure for the Fortune 1000. We’re hiring mission-driven talent to put those leaders at the center of our story.

THE OPPORTUNITY

Join our team as the Security Operations Team Lead. You will lead a team of Security Operations Engineers, serve as incident commander for major incidents, and own the day-to-day health and improvement of our agentic SOC.

You will also run our customer zero program, in which we operate the Cyera platform on our own environment and feed what we learn back to Product. This is a player-coach role: you lead the team and stay hands-on.

The ideal candidate has 5 or more years in security operations or incident response, including senior or lead-level experience, has run significant incidents end to end, and has led or mentored engineers.

RESPONSIBILITIES:

  • Team Leadership: Lead, coach, and develop the Security Operations team; set priorities, run the operational cadence, and build career paths.
  • Incident Command: Direct the response to major incidents, make containment calls, manage stakeholder communication, and own the after-action process.
  • SOC Operating Model: Own the metrics and roadmap for the agentic SOC and prioritize the improvements that move them.
  • Agentic Fleet Management: Own the fleet of security agents that handle first-pass triage, investigation, and response: define guardrails and human approval points, evaluate accuracy, keep an audit trail, and report impact on autonomous handling and analyst capacity.
  • Customer Zero Program: Own posture goals, remediation governance, the product feedback loop, and reporting for our internal Cyera deployment.
  • Detection and Response Strategy: Set detection and response priorities with the Security Engineering lead based on threat model and coverage.
  • Coverage: Design and run on-call and coverage arrangements, including any external or follow-the-sun support.
  • Hands-On Work: Take the hardest investigations, build detections and playbooks, and write code, with AI-assisted workflows as the default way of working.
  • Stakeholder Management: Represent Security Operations to security leadership and R translate operational data into risk and status.

Requirements

REQUIRED QUALIFICATIONS:

  • Experience: 5 or more years in security operations, incident response, or detection engineering, including senior or lead-level work.
  • Incident Command: Experience running significant incidents end to end, including executive communication.
  • Leadership: Experience leading, mentoring, or managing engineers or analysts.
  • AI-Assisted Workflows: Hands-on experience running AI-assisted and agent-based security workflows, with a clear view of where agents are reliable, where they fail, and how to measure both.
  • AWS Knowledge: Strong knowledge of AWS security architecture, IAM, logging, and cloud incident response.
  • AWS Certification: AWS Security Specialty or Solutions Architect Associate, or equivalent demonstrated depth.
  • Technical Depth: Strong Python and detection engineering across SIEM and cloud telemetry; able to review and improve others' work.
  • Operating Discipline: Experience defining metrics, running an operational cadence, and reporting to leadership.
  • Communication: Clear with executives and engineers; calm and decisive under pressure.

Nice to Have

  • Data Security: Experience with DSPM, DLP, or operating a security product as an internal customer.
  • Regulated Environments: FedRAMP, SOC 2, or ISO 27001.
  • Certifications: GCIH, GCFA, CISSP, AWS Security Specialty, or similar.



COMPENSATION INFORMATION:

Compensation Range: $150,000-225,000.

The range represents total compensation, and may include incentive for sales roles, equity or benefits, as applicable.

This compensation range represents Cyera’s good faith and reasonable estimate of the range of possible compensation for this role at the time of posting, and Cyera may ultimately pay more or less than the posted range. The final salary for this position will be determined in Cyera’s sole discretion, consistent with applicable law, and based on a variety of factors, including but not limited to the employee’s work experience, skills, and qualifications for the role, as well as the needs of Cyera’s business and other operational considerations.

Final compensation will vary based on seniority and relevance of experience, location, and position requirements.

This role may be eligible for potential merit increases based on factors such as individual or company performance, time in role, and other discretionary factors. In addition to a standard benefits and equity package, we offer a generous salary. Final compensation will vary based on seniority and relevance of experience, location, and position requirements.

This role may be eligible for potential merit increases based on factors such as individual or company performance, time in role, and other discretionary factors.​

BENEFITS - Why Cyera?

  • Unlimited PTO
  • Paid holidays and sick time
  • Health, vision, and dental insurance
  • Life, short and long-term disability insurance

Originally posted on Himalayas

Prepare your application

Use the description above to assess your fit for Cyera. This checklist is guidance from Resumize, rather than additional requirements from the employer. Imported listings can be shortened or change after collection, so confirm the complete description and current availability before sending an application.

Match requirements to evidence

Identify the responsibilities and skills the employer explicitly names. For each important requirement, choose one example from your work, education, training, or projects. Explain what you did, how you did it, and what changed as a result. Include a measurable outcome when you can support it. If you lack a requirement, describe related experience accurately instead of adding an unfamiliar skill to your resume.

Put the most relevant examples near the top of your resume. Keep job titles, dates, qualifications, and contact details consistent across your application materials. Use the employer’s terminology when it describes your experience accurately; a copied list of keywords does not explain your contribution. A short, specific bullet is easier to review than a paragraph that mixes several unrelated duties.

Check the working arrangement

Confirm the location, schedule, employment type, and any eligibility requirements on the employer’s site. A remote label does not establish worldwide eligibility or flexible hours. If compensation, benefits, equipment, travel, or contract duration are missing from this listing, write down your questions for the recruiter. Do not assume details from another opening at the same company apply to this role.

Review before submitting

Follow the employer’s requested file format and application instructions. Open your exported resume and check that its text is selectable, its sections read in order, and its links work. Proofread names, dates, and contact information. Share confidential work samples only when you have permission, and use an anonymized example when necessary.

Submit through a trusted employer or recruiting destination. If the original listing has disappeared, search the employer’s careers page for the title rather than assuming the vacancy remains open. Save the application date, job reference, and the version of your resume you sent. Those details help you prepare for a later conversation and avoid submitting conflicting information through several job boards.

Review your resume for writing and readability feedback, or browse other openings if this opportunity is unavailable.