SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Island is seeking a Security Operations Lead to own the core security operations function across the company's enterprise platform. This is a hands-on leadership role with broad ownership spanning detection, incident response, automation, and operational processes.
You will lead the end-to-end incident response lifecycle, from first alert through post-mortem, guiding investigations and coordinating responders while keeping stakeholders informed. You'll build and continuously improve incident response frameworks, including runbooks, severity definitions, escalation paths, and communication standards.
Key responsibilities include designing and implementing high-fidelity detections across SIEM, EDR, cloud, and endpoint platforms; building automation and AI-driven workflows to streamline triage and investigation; conducting proactive threat hunting; and serving as the technical owner for security operations strategy and best practices.
You'll partner closely with Engineering, IT, Infrastructure, and Compliance teams to embed security into new services and infrastructure changes, including FedRAMP initiatives. Clear communication during incidents—keeping technical teams, leadership, and customers aligned on impact and progress—is essential.
Required: 5+ years hands-on experience in Security Operations, Incident Response, or Detection Engineering; proven track record leading end-to-end incident response for high-severity incidents in cloud or enterprise environments; strong understanding of detection engineering, threat hunting, and modern security operations with hands-on SIEM, EDR, and cloud security platform experience; experience building incident response processes and frameworks; hands-on automation experience with SOAR platforms (Torq, Tines, or similar); solid AWS security fundamentals including IAM, CloudTrail, and containerized environments; strong knowledge of modern attack techniques and investigation best practices; excellent communication skills for both technical and non-technical audiences.
Advantages: EKS experience, mentoring experience, SOC2/FedRAMP compliance familiarity.
