The Security Operations & Engineering Manager leads both the operational defense of the organization (monitoring, detection, incident response) and the engineering of the security infrastructure that powers it (tooling, automation, detection logic, integrations). This is a hybrid leadership role for someone equally comfortable managing a team through a live incident and architecting the systems that prevent the next one.
Key Responsibilities:
Operations
Build and lead 24/7 (or business-hours, depending on org) security monitoring, detection, and incident response functions.
Architect and own the incident response lifecycle: detection, triage, containment, eradication, recovery, and post-incident review/root cause analysis.
Oversee vulnerability management program — scanning, prioritization, and remediation tracking with asset owners.
Deliver regular metrics, dashboards, and executive reporting on security posture, MTTR/MTTD, and incident trends.
Contribute to capacity management and budget management
Engineering
Design, build, and maintain security infrastructure: SIEM, SOAR, EDR, IDS/IPS, infrastructure hardening and log pipelines.
Develop and tune detection engineering — writing and refining correlation rules, alerts, and automated response playbooks.
Automate repetitive SOC workflows (triage, enrichment, ticketing) to reduce analyst toil and alert fatigue.
Partner with software/platform engineering on secure architecture reviews, threat modeling, and shift-left security practices.
Evaluate, pilot, and implement new security technologies; manage tool lifecycle and vendor relationships.
Leadership & Governance
Hire, mentor, coach and manage a team of security analysts and security engineers.
Collaborate cross-functionally with IT, legal, compliance, and engineering leadership on audits, investigations, and security initiatives.
Manage relationships with MSSPs, security vendors and business partners
Required Qualifications:
Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience).
6–10+ years in cybersecurity, including hands-on SOC/IR work and security engineering/automation experience.
2–4+ years in a management or team-lead capacity.
Good understanding scripting/automation skills (Python, PowerShell, or similar) for detection engineering and devsecops principles
Deep familiarity with SIEM/SOAR platforms (Splunk preferred) and EDR tools (SentinelOne preferred).
Solid grasp of networking and IAM
Professional certifications such as CISSP or equivalent are a plus
Skills:
Professional command of English
Good command of French is a plus
Strong leadership and people-management skills, balanced with a desire to stay technically hands-on.
Comfortable context-switching between incident command and long-term architecture/engineering work.
Ability to translate technical risk into business impact for executive stakeholders.
Strong documentation, process design, and automation mindset.
Skills Required
- Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience)
- 6-10+ years in cybersecurity including hands-on SOC/IR and security engineering/automation experience
- 2-4+ years in a management or team-lead capacity
- Experience building and operating security monitoring, detection, and incident response functions (24/7 or business-hours SOC)
- Scripting and automation skills for detection engineering and DevSecOps (Python, PowerShell, or similar)
- Deep familiarity with SIEM and SOAR platforms
- Experience with EDR tools and endpoint detection/response
- Splunk experience (preferred)
- SentinelOne experience (preferred)
- Experience designing and tuning detection engineering: correlation rules, alerts, and automated response playbooks
- Experience automating SOC workflows (triage, enrichment, ticketing) to reduce analyst toil
- Solid grasp of networking and Identity and Access Management (IAM)
- Professional command of English
- Professional certifications such as CISSP or equivalent (a plus)
- Good command of French (a plus)
What We Do
In 2006, when NOZ (the European clearance leader) started its expansion within Eastern Europe and Africa, Veo quickly fell in love with its vision and agile environment, always pushing things to discover more of this amazing business of clearance and responsible economy. Hence, we've added our own dynamic culture and mindset to everything we embraced from NOZ. Veo Worldwide is a clearance company, based in Europe, with over 17 years of activity. We constantly search for solutions to help business owners capitalize on their unsold stock (past collections, short expiry products, cancelled orders) and become efficient.
