Security Operations Team Lead in Vancouver

Safe Software is looking for a Security Operations Team Lead to build and lead our security operations function. This is a new role, and the person in it will own the programs, processes, and people that make security operations work at Safe. We have an immediate opening and are excited to find the right candidate to join our team.

Reporting to the Director of Information Security, you’ll take ownership of the programs on our roadmap — incident response, vulnerability and patch management, system hardening and configuration management, device trust and conditional access, and resiliency planning — and turn them from initiatives into durable, measurable practices. This is also a people‑leadership role: you’ll manage the Security Operations Engineers who deliver that work, starting with a small team and growing it as the function matures.

It’s a leadership role, and a hands‑on one. You’ll stay close enough to the work to make good technical calls, carry a share of the on‑call rotation, and be credible with the engineers you lead. We’re looking for someone with a first stretch of leadership behind them who wants substantially more ownership than they’ve had so far, and the support to grow into it.

You’ll also set the tone for how security shows up at Safe. Security only works when it feels like a partnership rather than an obstacle, and the best security operations leaders we’ve worked with treat other teams as partners with their own pressures and deadlines. That’s the disposition we’re hiring for.

About The Team: Information Security at Safe protects the data, systems, and people behind FME and the 25,000+ enterprise customers who rely on it. We’re a growing, high‑trust team that partners closely with teams across Safe rather than operating as a separate gate.

We’re at a genuinely interesting period of growth and opportunity: we’re building programs, not just maintaining them. Incident response, resiliency planning, configuration management, and vulnerability management are all being stood up or significantly matured right now, and this role drives much of that work. This means real latitude to decide how security operations should work at Safe.

We also lean on AI and automation to cut toil, sharpen investigations, and move faster. Part of this role is setting both the expectation and the guardrails for how the team experiments with them.

What You’ll Be Doing:

• Build and lead the security operations team, including hiring, onboarding, coaching, performance, and career development.
• Own the incident response program end to end— the process, the runbooks, the on‑call rotation, the tabletop exercises, and the post‑incident reviews.
• Own the security operations roadmap and its delivery, translating strategy into prioritized, resourced work with clear outcomes, and reporting on progress, risk, and where you need help.
• Drive programs and processes to maturity— automated patch management, CIS benchmark adoption for system hardening and configuration management, device trust and conditional access, vulnerability management with meaningful SLAs, and resiliency planning.
• Set the technical direction for our security tooling, ensuring Rapid7 InsightVM (vulnerability management) and InsightIDR (SIEM), Cisco Secure Endpoint (EDR), Cisco Umbrella, Active Directory, JumpCloud, Google Workspace, and AWS security controls are configured, tuned, and delivering real detection value rather than noise.
• Define and track the metrics that matter— detection and response times, remediation SLAs, hardening and patch coverage, alert quality — and make sure they drive decisions instead of decorating a dashboard.
• Champion AI and automation across the team’s workflows, piloting and standardizing tools that reduce toil and sharpen investigations, and establishing sensible guardrails for how AI is used in security work.
• Own Security Operations’ contribution to compliance, operating and evidencing controls for ISO 27001, SOC 2, and future frameworks.
• Partner with IT and teams across Safe to embed security into how work already gets done.
• Represent Security Operations to leadership, communicating risk, incidents, and program status clearly to both technical and non‑technical audiences.

Qualifications, Skills, and Competencies:

Safers come from a variety of backgrounds with a diversity in skills and knowledge. That said, we find that those who are most successful in this role have experience with the following areas.

Required Skills:

• 5+ years in security operations, incident response, or a closely related security engineering discipline, including 1–2 years leading a team.
• Meaningful ownership of a security program — incident response, vulnerability management, hardening, or similar.
• Deep hands‑on SIEM and EDR experience.
• Strong incident response background.
• Practical experience with vulnerability and patch management at scale.
• Solid network security knowledge.
• Solid cloud security knowledge, ideally AWS.
• Working knowledge of identity and access.
• Experience supporting or operating controls for ISO 27001, SOC 2, or comparable frameworks.
• Excellent written and verbal communication.

Desired Skills / Bonus Points:

• Direct experience with our stack.
• Experience standing up or significantly maturing an incident response program.
• Demonstrated experience building AI or automation into security operations.
• Experience with business continuity, disaster recovery, or resiliency planning.
• Experience hiring, growing, and developing a technical team.
• Scripting or development skills.
• Relevant certifications or a plan to complete certifications.
• A Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field.

If you don’t meet every single qualification but are excited about this role, we’d still love to hear from you.

What You Can Expect:

• Meaningful Work.
• A Supportive Environment.
• Social Responsibility.
• Learning & Career Development.
• Flexible Working Hours.
• Work-Life Balance.
• Health & Wellness.
• Family is important.
• Shared Success.
• An Accessible Commute.

About Safe Software: Safe Software transforms organizations with FME, the only All‑Data Any‑AI Enterprise Integration Platform connecting all your data, anywhere, at any velocity.

Our Commitment to Diversity and Inclusion: Safe Software is an equal opportunity employer and we truly believe that innovation and strength begin with diversity and inclusion.