Director of Security Operations and Engineering

EDB provides a data and AI platform that enables organizations to harness the power of Postgres for transactional, analytical, and AI workloads across any cloud. The Director of Security Operations and Engineering will lead security operations and engineering, overseeing incident response, detection, preventive controls, automation, insider threat initiatives, acquisition integrations, and the scaling of the security program.

Responsibilities:

• Incident response end to end, from intake and severity model through after-action and improvement, including partnership with Legal on investigations
• Detection engineering, threat hunting, and the SIEM, EDR, SOAR, and cloud security platforms that support them
• Security Engineering strategy and delivery, with the goal of preventing incidents rather than responding to them: preventive controls, least privilege, and identity assurance across employees, contractors, and build systems
• The insider threat program, built with HR, Legal, and IT
• Automation and agentic AI that extends analyst capacity (the analyst always owns the decision)
• Security integration of acquired companies and new environments into EDB's standards
• Close partnership with IT and Product leadership to build preventive controls into the platforms, pipelines, and products they own, plus security input to third-party risk and device posture with GRC
• Scaling the program: the org design, operating rhythms, roadmap, budget, and vendor strategy that let coverage grow with the business without growing linearly with headcount

Requirements:

• 5+ years of management experience leading security teams
• 7+ years of hands-on experience in security operations, incident response, detection, or security engineering
• A track record of scaling a security function through rapid growth (hiring, automation, and operating discipline), not just running one
• Strategic thinking that goes beyond the immediate scope of the role
• The ability to translate technical risk into business impact for executives, legal, customers, and your IT and Product counterparts
• Hands-on scripting or automation experience (Python, Go, etc.)
• Experience applying AI or agent-based automation to security workflows
• Cloud security experience and background in M&A security integration
• Experience building an insider threat or identity assurance program