Security & Threat Operations Manager

<div class="content-intro"><p><span style="font-family: helvetica, arial, sans-serif;"><strong><span style="font-size: 14pt;">About Us</span></strong></span></p> <p><span style="font-family: helvetica, arial, sans-serif;">DriveWealth is on a mission to make investing easier. We believe that everyone should have the ability to control their financial future, and that access to financial markets should not be limited by geography, wealth, or legacy systems. We are a global B2B financial technology organization dedicated to democratizing access to financial independence around the world. Our mission is realized through an API-based platform, empowering our partners to offer seamless investing and trading experiences to clients worldwide, all from their mobile devices. Our technology provides partners with a modern, extensible toolkit, enabling traditional investment workflows and innovative techniques like fractional share ownership. DriveWealth has evolved into a global platform offering trading of US equities, mutual funds, ETFs, fixed income, and options.</span></p> <p><span style="font-family: helvetica, arial, sans-serif;">There’s never been a better time to build a category-defining business and there has rarely been a team better positioned for this opportunity. Our culture blends the pace and agility of a fintech start-up with the impact, stability, and discipline of Wall Street. We encourage creativity and experimentation while ensuring institutional-grade execution and regulatory compliance in everything we do. Join us and help build the future of global investing!</span></p></div><h3><span style="font-family: helvetica, arial, sans-serif;"><strong>About the Role</strong></span></h3> <p><span style="font-family: helvetica, arial, sans-serif;">DriveWealth LLC is seeking a highly motivated and experienced Security & Threat Operations Manager to build and mature the function protecting our brokerage platform and corporate environment. Reporting to the Chief Information Security Officer, you will grow and lead the team, establish its operating model and roadmap, and deliver measurable improvements in threat detection, investigation, incident response, and exposure management.</span></p> <p><span style="font-family: helvetica, arial, sans-serif;"><br>In this hands-on leadership role, you will own detection content and the exposure management lifecycle, security monitoring and incident response, operation and tuning of security controls, and turn threat intelligence into defensive improvements. You will act as Incident Commander during significant security incidents and coordinate response across technical and business teams. Partnering with Security Engineering, DevOps & Platform, and Product & Engineering, you will ensure defenses evolve along with our AWS platform, Kubernetes services, low-latency trading infrastructure, and corporate technology within an innovative and entrepreneurial culture.<br><br></span></p> <h3><span style="font-family: helvetica, arial, sans-serif;"><strong>What You’ll Do</strong></span></h3> <p><strong>Program Maturity & Team Leadership</strong></p> <ul> <li>Program Development: Mature Security & Threat Operations through a measurable roadmap, defined operating model, appropriate monitoring coverage, escalation procedures, and service provider oversight.</li> <li>Team Development: Grow and lead the team through hiring, coaching, training, career development, and performance management.</li> </ul> <p><strong>Threat Detection, Investigation & Intelligence</strong></p> <ul> <li>Detection Engineering: Own the detection program incorporating threat intelligence, content development, proactive hunting, and validation through attack simulations and purple-team exercises. Treat detection content development as an engineering discipline.</li> <li>Monitoring & Investigation: Own security monitoring and investigation across product and corporate environments, including phishing, malware, credential compromise, API abuse, DDoS, and insider threats.</li> <li>Digital Risk Monitoring: Own digital risk monitoring covering external attack surfaces, leaked credentials, exposed data, impersonation, phishing domains, and takedown coordination.</li> </ul> <p><strong>Incident Response</strong></p> <ul> <li>Automated Response: Partner with Security Engineering to build pre-defined automated security response actions. Coordinate with business leaders on required response actions which cannot be automated or which require compensating actions to prevent unnecessary business disruption.</li> <li>Incident Management: Own the incident response lifecycle as Incident Commander, including preparedness, forensic evidence handling, containment, recovery validation, regulatory coordination, and post-incident improvement.</li> </ul> <p><strong>Exposure Management & Control Operations</strong></p> <ul> <li>Exposure Management: Own the exposure management lifecycle from discovery through verified closure, coordinating remediation with accountable system and product owners.</li> <li>Control Operations: Own the operation and tuning of operational security controls, such as DLP, WAF, email filtering, and identity compromise prevention in partnership with Security Engineering, DevOps & Platform, and Product & Engineering to meet evolving product and corporate technology requirements.</li> </ul> <p><strong>Compliance & Assurance</strong></p> &lt