Sr. Security Operations Manager (Global SecOps)

Role Overview

We are looking for a Senior Security Operations Manager to support and scale Agora’s global SecOps function.

This role will serve as a key regional anchor for 24/7 security operations, helping ensure seamless coverage across time zones while driving incident response, detection engineering, operational maturity, and continuous security improvement.

You will work closely with global teams across security, engineering, infrastructure, and compliance to ensure security operations are consistent, measurable, and aligned with business and regulatory requirements, while also supporting broader operational security programs, including vulnerability management, bug bounty, and penetration testing.

Key Responsibilities

1. Global Security Operations Execution

• Act as the lead for global SecOps coverage, enabling a follow-the-sun operating model
• Execute and continuously improve SOC operations, monitoring workflows, escalation paths, and response procedures
• Partner with global security leadership to implement standardized operating procedures, controls, and reporting

2. Incident Response & Threat Management

• Lead incident detection, triage, investigation, containment, and response coordination across global environments
• Serve as a primary responder during APAC hours, ensuring effective coordination and handoff with other regions
• Drive threat intelligence integration and proactive threat hunting
• Maintain and improve incident response playbooks, runbooks, and response readiness

3. Detection & Security Tooling

• Operate and optimize SIEM, SOAR, EDR/XDR, and cloud security tooling
• Improve alert quality, detection coverage, signal-to-noise ratio, and response automation
• Partner with engineering teams to enhance security telemetry and logging coverage across infrastructure, APIs, RTC platforms, and AI-related environments

4. Security Monitoring, Metrics & Reporting

• Develop and maintain operational dashboards and reporting for:
• Incident trends
• Detection effectiveness
• Response performance
• Security posture metrics
• Track and report key performance indicators such as MTTD, MTTR, escalation trends, and remediation status
• Provide regular updates to global security leadership and relevant stakeholders

5. Offensive Security & Exposure Management Support

• Support and help operationalize bug bounty, vulnerability disclosure, and penetration testing programs
• Coordinate triage, validation, prioritization, and remediation follow-up for externally identified security findings
• Partner with internal teams and external vendors to support application, infrastructure, cloud, and product penetration testing
• Help ensure findings from bug bounty, pentests, and scans are properly tracked, communicated, and remediated
• Contribute to improving the overall security testing lifecycle by feeding lessons learned back into detections, hardening, and response processes

6. Operational Security & Compliance Support

• Support:
• Vulnerability management and remediation tracking
• Cloud security monitoring
• Secure configuration and hardening efforts
• Business continuity and incident readiness
• Security controls required for SOC 2, HIPAA, and related frameworks
• Contribute to evidence collection and control operation for audits and compliance reviews

7. Team Development

• Mentor and guide SecOps analysts and engineers as the function scales
• Promote operational discipline, accountability, and continuous improvement
• Act as a strong bridge between regional operations and global security leadership

Qualifications

• 12-15+ years of experience in cybersecurity
• 8+ years in SecOps, SOC, incident response, or related security operations role, with leadership or senior-level responsibility
• Strong hands-on experience with:
• SIEM platforms such as Splunk, Microsoft Sentinel, or equivalent
• EDR/XDR tools such as Microsoft Defender or CrowdStrike
• Cloud environments, preferably AWS
• Strong understanding of:
• Incident response, threat detection, and security monitoring workflows
• Network protocols, system logs, and forensic investigation techniques
• Threat modeling and attack frameworks such as MITRE ATT&CK and cyber kill chain
• Strong analytical and problem-solving skills, with the ability to manage multiple priorities under pressure

Preferred Experience

• Experience supporting global or distributed 24x7 security operations
• Experience with bug bounty, vulnerability disclosure handling, or pentest coordination
• Exposure to real-time platforms, large-scale distributed systems, or AI/ML environments
• Familiarity with SOC 2, HIPAA, or similar security/compliance frameworks
• Experience in high-growth or pre-IPO environments

Certifications (Preferred)

• CISSP, GCIH, GCIA, CEH, or equivalent