Director of Security Operations and Engineering

免费注册后解锁"你的匹配分 vs 高分画像"与个人技能缺口。

A Little About Us EDB provides a data and AI platform that enables organizations to harness the full power of Postgres for transactional, analytical, and AI workloads across any cloud, anywhere. EDB empowers enterprises to control risk, manage costs and scale efficiently for a data and AI led world. Serving more than 1,500 customers globally and as the leading contributor to the vibrant and fast-growing PostgreSQL community, EDB supports major government organizations, financial services, media and information technology companies. EDB’s data-driven solutions enable customers to modernize legacy systems and break data silos while leveraging enterprise-grade open source technologies. EDB delivers the confidence of up to 99.999% high availability with mission critical capabilities built in such as security, compliance controls, and observability. For more information, visit www. enterprisedb .com The Role: You'll lead Security Operations and Security Engineering at EDB, reporting to the CISO as a trusted member of the security leadership team. You own how we detect, respond, and (increasingly) prevent. That means the people, the platforms, and the playbooks behind threat detection, incident response, and the engineering that makes them scale. You'll be a peer to the leaders across security, including Governance, Risk Compliance and Application Security Vulnerability Management, and you'll help shape the direction of the broader InfoSec organization. You'll also partner closely with peer leaders in IT and Product, because most of the controls we define live in their systems, pipelines, and roadmaps. This is a scaling role. The business is growing fast, and so is everything security has to cover: more products, more cloud, more acquired companies and environments to bring up to a common standard. You'll decide what to build, what to automate, and where to add people, so the program grows ahead of the risk instead of behind it. As EDB grows, so will the scope and opportunity of the role. One leader owns both Security Operations and Security Engineering on purpose: the best incident is the one that never happens. What we learn from detection and response feeds directly into the engineering of preventive controls, so we move from detecting bad things to making them impossible, and from manual triage to automation and agents that give analysts leverage. If you want to build that, and grow a program and a team as the company grows, this is the seat. What your impact will be: Incident response end to end, from intake and severity model through after-action and improvement, including partnership with Legal on investigations Detection engineering, threat hunting, and the SIEM, EDR, SOAR, and cloud security platforms that support them Security Engineering strategy and delivery, with the goal of preventing incidents rather than responding to them: preventive controls, least privilege, and identity assurance across employees, contractors, and build systems The insider threat program, built with HR, Legal, and IT Automation and agentic AI that extends analyst capacity (the analyst always owns the decision) Security integration of acquired companies and new environments into EDB's standards Close partnership with IT and Product leadership to build preventive controls into the platforms, pipelines, and products they own, plus security input to third-party risk and device posture with GRC Scaling the program: the org design, operating rhythms, roadmap, budget, and vendor strategy that let coverage grow with the business without growing linearly with headcount What you will bring: 5+ years of management experience leading security teams 7+ years of hands-on experience in security operations, incident response, detection, or security engineering A track record of scaling a security function through rapid growth (hiring, automation, and operating discipline), not just running one Strategic thinking that goes beyond the immediate scope of the role T

关于我们 EDB 提供一个数据和 AI 平台，使组织能够在任何云、任何地点充分发挥 Postgres 在事务、分析和 AI 工作负载中的能力。EDB 赋能企业控制风险、管理成本，并为数据和 AI 主导的世界高效扩展。EDB 服务于全球 1,500 多家客户，并且是充满活力且快速增长的 PostgreSQL 社区的主要贡献者，支持主要政府组织、金融服务、媒体和信息技术公司。EDB 的数据驱动解决方案使客户能够现代化遗留系统并打破数据孤岛，同时利用企业级开源技术。EDB 提供高达 99.999% 高可用性的信心，并内置安全、合规控制和可观测性等关键任务能力。如需更多信息，请访问 www.enterprisedb.com 职位： 你将领导 EDB 的安全运营和安全工程，向 CISO 汇报，并作为安全领导团队中值得信赖的成员。你负责我们如何检测、响应以及（日益）预防。这意味着威胁检测、事件响应及其规模化工程背后的人员、平台和 playbook。你将与安全领域的各位领导者同级，包括治理、风险合规以及应用安全漏洞管理，并且你将帮助塑造更广泛 InfoSec 组织的方向。你还将与 IT 和产品部门的同级领导者密切合作，因为我们定义的多数控制措施都存在于他们的系统、管道和路线图中。这是一个扩张型职位。业务增长迅速，安全需要覆盖的一切也在增长：更多产品、更多云、更多被收购公司和环境需要提升到统一标准。你将决定构建什么、自动化什么，以及在哪里增加人员，使项目增长领先于风险，而不是落后于风险。随着 EDB 成长，该职位的范围和机会也将扩大。由一位领导者同时负责安全运营和安全工程是有意为之：最好的事件是从未发生的事件。我们从检测和响应中学到的内容会直接反馈到预防性控制的工程中，因此我们从检测坏事情转向让坏事情不可能发生，从人工分诊转向自动化和为分析师提供杠杆的 agent。如果你想构建这一点，并随着公司成长扩展一个项目和团队，这就是适合你的位置。你的影响将包括： 端到端事件响应，从接收和严重性模型到事后复盘和改进，包括与法务合作进行调查 检测工程、威胁狩猎，以及支持它们的 SIEM、EDR、SOAR 和云安全平台 安全工程战略和交付，目标是预防事件而不是响应事件：预防性控制、最小权限，以及跨员工、承包商和构建系统的身份保证 与 HR、法务和 IT 共同建设内部威胁项目 自动化和 agentic AI，扩展分析师能力（决策始终由分析师负责） 将被收购公司和新环境的安全集成到 EDB 的标准中 与 IT 和产品领导层密切合作，将预防性控制构建到他们拥有的平台、管道和产品中，并为第三方风险和设备态势提供安全输入，与 GRC 协作 扩展项目：组织设计、运营节奏、路线图、预算和供应商战略，使覆盖范围随业务增长，而不必随员工人数线性增长 你将带来： 5 年以上领导安全团队的管理经验 7 年以上在安全运营、事件响应、检测或安全工程方面的一线实践经验 通过快速增长扩展安全职能（招聘、自动化和运营纪律）的过往记录，而不仅仅是运行一个职能 超越该职位即时范围的战略思维 T

⚑ 岗位信息收录自公开招聘页（Himalayas），以雇主官网为准