Skip to content

Bugcrowd

Remote - US

Manager, Security Operations

Posted 8 days ago

Level
Leadership
Experience
5+ years
Work style
Remote
Pay
$129.3k to $161.6k

At a glance

The role in plain English

This is a remote US-based management role leading a team of Security Consultants at Bugcrowd. The position focuses on overseeing the triage, validation, and resolution of security submissions, as well as developing team members and improving operational processes. The role suits experienced security professionals with strong technical backgrounds and proven leadership skills, who enjoy mentoring others and collaborating across teams to deliver customer outcomes.

What you'll do

  • Lead and develop a team of Security Consultants
  • Oversee triage, validation, and resolution of security submissions
  • Drive operational improvements and automation initiatives
  • Provide subject matter expertise and technical guidance
  • Partner cross-functionally to improve workflows and outcomes

What they're looking for

Essential

  • 5+ years in security operations or related field
  • Experience leading or mentoring technical teams
  • Strong understanding of vulnerability classes (OWASP Top 10)
  • Incident response and vulnerability triage experience

Nice to have

  • OSCP or comparable certification
  • Python automation experience
  • Tableau or BI tool experience
  • Proven operational improvement success

Core skills

  • Application security
  • Incident response
  • Vulnerability management
  • Team leadership
  • Python
  • Tableau
  • Process improvement

Certifications mentioned

  • OSCP

The shape of the job

Technical depth

4/5

FoundationalSpecialist

Pace

4/5

SteadyFast-moving

Ownership

4/5

GuidedSelf-directed

Teamwork

4/5

Heads-downHighly collaborative

Cyberend's reading of the listing, not the employer's own scores.

How the pay compares

Below most similar roles

Compared with 21 open leadership roles in the US on Cyberend that state their pay.

This role

$129k to $162k a year

  • This role
  • Typical range ($194k to $249k)

Application toolkit

Make your application count

See which requirements your CV meets and what is missing.

Your CV is used for this answer only and never stored.

Questions to prepare for

  1. 01Describe your experience leading security operations teams.
  2. 02How do you approach triage and validation of vulnerability submissions?
  3. 03Give an example of implementing process improvements through automation.
  4. 04How do you handle escalations and complex security incidents?

About Bugcrowd

Bugcrowd provides a security platform focused on exposure discovery, assessment, and offensive testing, combining AI and human insight.

Full job descriptionAs published by Bugcrowd

Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit www.bugcrowd.com .

Job Summary

The Manager, Security Operations is responsible for leading a team of Security Consultants while ensuring the timely and accurate triage, validation, and resolution of security submissions. This role requires a strong technical foundation in application security, incident response, and vulnerability assessment, combined with proven people leadership skills. The ideal candidate is an experienced security professional who excels at developing team members, driving operational excellence, improving processes through data and automation, and partnering cross-functionally to deliver exceptional outcomes for customers.

Essential Duties and Responsibilities

  • Lead, coach, and develop a team of Security Consultants through regular feedback, career development, and performance management.
  • Serve as a subject matter expert in at least one security specialty (web, network, cloud, or mobile) and provide technical guidance to internal and external stakeholders.
  • Demonstrate expertise across all vulnerability submission types and support complex escalations and appeals, partnering with other business units as needed.
  • Drive operational excellence by measuring team performance, identifying opportunities for automation, and implementing process improvements.
  • Plan, prioritize, and manage team workloads while adapting to changing business needs and customer priorities.
  • Mentor team members and contribute to the growth of the broader security organization through knowledge sharing and technical leadership.
  • Build strong cross-functional partnerships to improve workflows and deliver high-quality customer outcomes.
  • Lead effective meetings, clearly communicate priorities, and ensure timely execution of action items.
  • Act as a trusted advisor to leadership and customers by providing sound technical judgment and operational insight.
  • Stay current on security industry standards, emerging threats, and best practices to continuously improve team capabilities.

Education, Experience, Knowledge, Skills, and Abilities

  • 5+ years of experience in Security Operations, Application Security, Incident Response, Vulnerability Management, or a related field.
  • Previous experience leading, supervising, or mentoring technical teams.
  • Strong understanding of common vulnerability classes, including the OWASP Top 10.
  • Experience with incident response, vulnerability triage, and validation.
  • Excellent analytical, problem-solving, organizational, and decision-making skills.
  • Exceptional written and verbal communication skills with the ability to influence technical and non-technical stakeholders.

Preferred Experience

  • Proven ability to manage multiple priorities in a fast-paced environment.
  • OSCP or a comparable security certification, or equivalent hands-on offensive security or vulnerability research experience.
  • Experience using Python to automate workflows or process operational data.
  • Experience using Tableau or similar business intelligence tools to create dashboards and drive data-informed decisions.
  • Demonstrated success implementing operational improvements through metrics, automation, and continuous improvement initiatives.

Working Conditions and Physical Requirements

This role will require periodic travel to support business needs. The Manager, Security Operations is expected to attend onsite events such as Bug Bashes and other customer-facing engagements, as well as participate in in-office events at irregular intervals. Travel will vary depending on business priorities but should be anticipated as a recurring responsibility of the position.

Pay Range Disclosure

At Bugcrowd, we strive for fairness, equality and to create an environment that allows our people to perform at their very best. Our compensation philosophy is to foster a collaborative community that rewards, attracts and retains the best possible talent.

The provided salary details are based on US national averages and we retain the flexibility to tailor to the needs of the business. The national estimate for the current base range for this position is $129,280- $161,600.

This position may also be eligible to participate in a discretionary bonus program or commission plan, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Culture

  • At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work.
  • We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well.
  • Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point.

At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring.

Disclaimer

This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence.

The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets).

Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law.

Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here: https://www.bugcrowd.com/privacy .

Equal Employment Opportunity:

Bugcrowd is EOE, Disability/Age Employer.

Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.

Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com.

Apply at: https://www.bugcrowd.com/about/careers/

  • CrowdStrike

    Posted 13 days ago

    Director, Incident Response ( Remote, GBR)

    United Kingdom - Remote; United Kingdom

    Lead and manage the incident response consulting team, overseeing investigations for major organizations and ensuring high-quality incident response services. Leadership experience in incident response required. Remote in the UK.

    LeadershipIncident responseTeam leadershipClient management
  • USA - Remote; United States of America · $140k to $195k

    Manage the weekend shift team for digital forensics and incident response, leading investigations and overseeing team operations. Requires incident response management experience. Remote in the US, Fri-Mon schedule.

    LeadershipIncident responseDigital forensicsMalware analysis
  • United States of America · Remote · $165k to $185k

    What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our…

    LeadershipIncident responseDigital forensicsMalware analysis
  • Proofpoint

    Posted 19 Oct

    Threat Strategy Manager

    Melbourne, Australia and 6 more · Remote

    About Us: Proofpoint is a global leader in human- and agent-centric cybersecurity. We protect how people, data, and AI agents connect across email, cloud, and collaboration tools. Over 80 of the Fortune 100, 10,000…

    LeadershipThreat huntingEmail securityClient management

Hand-picked cyber jobs, every morning.

Cyberend Daily sends a graduate, mid-level, senior and leadership role each day, alongside the security news worth knowing. Free.

Free beginner roadmap PDF when you join · No spam · Unsubscribe anytime