The posting
From Fivetran’s founding until now, our mission has remained the same: to make access to data as simple and reliable as electricity. With Fivetran, customer data arrives in their warehouses, canonical and ready to query, with no engineering or maintenance required. We’re proud that more organizations continue to leverage our technology every day to become truly data-driven.
About Us
Fivetran and dbt Labs are bringing together two industry-leading companies with a shared mission: helping organizations unlock the full value of their data. Together, we’re delivering the data infrastructure layer that helps organizations move, transform, and trust their data — from the moment data moves, through every transformation, to the context teams and AI systems rely on. Fivetran helps organizations automate data movement across the systems, clouds, engines, and tools they rely on. dbt Labs pioneered analytics engineering, helping teams transform data into reliable, governed insights. Together, we support thousands of organizations as they build a trusted foundation for analytics, AI, and better business decisions. As we bring our teams and technology together, we’re building on the strengths of both companies while continuing to deliver the products and experiences our customers know and trust. It’s an exciting time to join us: we’re creating a company with the scale, talent, and technology to help more organizations put their data to work with greater speed, confidence, and impact. During this transition period, you may see references to both Fivetran and dbt Labs throughout our recruiting process as we integrate our teams, systems, and career sites.
About the Role
Fivetran + dbt is seeking a Manager of Security Operations, Incident Detection and Response, to bolster and improve the robustness and security of the platform and the entire enterprise. This people-leadership role is hands-on and execution-focused, requiring deep expertise in security operations, incident detection and response, AI-driven security automation, and securing multi-tenant SaaS environments. You'll build and lead a high-performing team, own the detection and response technology stack, and serve as the accountable leader for incident response across the entire enterprise, ensuring threats are detected, contained, and remediated quickly from endpoint to cloud to production.
This is a full-time remote position based out of the US (EST Time Zone).
Technologies You’ll Use
Crowdstrike, Okta, Google Workspace, Wiz, Open Source, Notion, JIRA
What You’ll Do
- People Leadership: Lead, mentor, and develop a team of detection and response engineers and analysts. Set clear goals, manage performance, and grow careers while fostering a culture of ownership, curiosity, and urgency.
- Hiring & Team Building: Recruit, hire, and onboard top security talent. Define team structure, roles, on-call rotations, and hiring plans to scale the team alongside the business.
- Enterprise Incident Response: Own the incident response program for the entire enterprise, including investigation, containment, eradication, remediation, and post-incident review. Act as incident commander for major security events and coordinate with Legal, Privacy, Communications, and executive leadership.
- Detection Engineering: Build, optimize, and maintain high-fidelity detections across cloud, identity, endpoint, SaaS, and application layers, using threat-informed approaches such as MITRE ATT&CK to close coverage gaps.
- AI-Driven Security Operations: Drive the adoption of AI, including LLMs and AI agents, to automate alert triage, enrichment, investigation, and response. Evaluate and integrate AI capabilities to scale the team, and build detections for threats targeting AI systems and AI usage across the enterprise.
- Multi-Tenant SaaS Security: Design detection and response strategies tailored to a multi-tenant SaaS platform, including tenant isolation, cross-tenant access, and customer data protection. Lead customer-impacting incident response and coordinate customer notifications.
- Security Technology Ownership: Own the security operations technology stack, including SIEM, SOAR, EDR/XDR, cloud detection and response, and log pipelines. Manage the roadmap, budget, and vendor relationships.
- Threat Hunting & Intelligence: Lead proactive threat hunting and integrate threat intelligence to identify and mitigate emerging threats before they impact the business.
- Cross-Team Collaboration: Work directly with engineering, infrastructure, IT, application security, and GRC teams to integrate detection and response practices and remediate risks across build pipelines, runtime environments, and corporate systems.
- Tooling & Automation: Develop and maintain automation, playbooks, and integrations to streamline security processes and provide self-service security tools to the organization.
- Security Standards & Metrics: Implement consistent security controls, monitoring, and alerting across the enterprise. Define and report on key metrics such as mean time to detect (MTTD) and mean time to respond (MTTR), and support compliance requirements.
- Knowledge Sharing: Stay up to date with trends in security operations, incident response, cloud security, and AI security, applying this knowledge to improve the Fivetran platform's security posture.
Skills We’re Looking For
- Security Operations & Incident Response Expertise: Deep expertise in detecting, investigating, and responding to security incidents, with a track record of leading enterprise-wide incident response.
- People Management: Proven experience managing, hiring, and developing security teams, including setting priorities, managing performance, and building a strong team culture.
- Multi-Tenant SaaS Experience: Extensive experience securing and responding to incidents in multi-tenant SaaS environments at scale, with a strong understanding of tenant isolation and customer data protection.
- AI Proficiency: Hands-on experience applying AI, including LLMs and AI agents, to security operations to automate detection, triage, and response, and a strong understanding of the risks AI introduces.
- Cloud & Infrastructure Security: Strong experience with cloud platforms (e.g., AWS, GCP, Azure), Kubernetes, and containerized environments, including cloud-native logging and detection.
- Detection & Response Tooling: Proficiency with SIEM, SOAR, EDR/XDR, identity, and cloud detection tools, and experience integrating them into automated workflows.
- Technology Ownership: Experience owning a security technology roadmap, including tool selection, budgets, and vendor management.
- Problem-Solving: Excellent problem-solving and troubleshooting skills, with the ability to make sound decisions under pressure in fast-paced environments.
- Communication: Strong communication skills with the ability to effectively collaborate with and educate engineering teams, and to communicate clearly with executives and customers during incidents.
- Curiosity & Urgency: Demonstrates strong curiosity, a sense of urgency, and a hands-on approach to diving deep into complex technical problems to drive timely and effective solutions.
#LI-Remote #LI-AM1
The compensation range displayed on this job posting reflects the minimum and maximum target for new hire compensation for the target position and level, and may include sales incentives or target bonuses depending on the role. Our compensation ranges are determined by role, level, and location. Our job titles may span more than one career level. Within the range, individual compensation is determined by additional factors, including job-related skills, experience, relevant education or training, business need, market demands. The compensation range is subject to change and may be modified in the future. Your recruiter can share more about the specific compensation range for your location during the hiring process.
Pay Range
$186,701—$233,376 USD
Perks and Benefits
- 100% employer-paid medical insurance*
- Generous paid time away from work, including paid vacation or flexible/unlimited vacation depending on role and country, plus paid sick time, inclusive parental leave, paid holidays, including a year-end Global Week of Rest, and volunteer days off.
- RSU stock grants*
- Professional development and training opportunities
- Company virtual happy hours, free food, and fun team-building activities
- Monthly cell phone stipend
- Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents.
*May vary by country and worker type - please reach out to your recruiter for more information
Click here to learn more about Fivetran's Benefits by Region.
We’re honored to be valued at over $5.6 billion, but more importantly, we’re proud of our core values of Get Stuck In, Do the Right Thing, and One Team, One Dream. Read about us in Forbes.
Fivetran brings together high-quality talent across the globe to make data access as easy and reliable as electricity for our customers. We value and recognize that our customers benefit from having innovative teams made of people from many backgrounds, experiences, and identities. Fivetran promotes diversity, equity, inclusion & belonging through attracting, recruiting, developing, and retaining a diverse workforce, not only because it is the right thing to do, but because it helps us build a world-class company to better serve our customers, our people and our communities.
To learn more about Fivetran’s culture and what it’s like to be part of the team, click here and enjoy our video.
To learn more about our candidate privacy policy, you can read our statement here.
We are committed to ensuring that all candidates have an equal opportunity to participate in our interview process. If you require accommodations at any stage of the process due to a disability, medical condition, or any other circumstance, please don't hesitate to submit your request by filling out this form. We will work with you to provide reasonable accommodations to facilitate your participation and ensure a fair and accessible interview experience. Your request and any information provided will be kept confidential and will not impact your candidacy. We look forward to hearing from you and accommodating your needs to the best of our ability.
