Security Operations Lead – SecOps

About the role

As the Security Operations Lead at Sword, you will own the design and execution of the company’s SecOps function. You will define the strategy, architecture, and processes that protect over 700,000 members across three continents, leveraging AI and automation to scale a lean, high‑impact team.

Key responsibilities

• Set the strategic direction for the Security Operations Center, including operating model, SIEM architecture, detection engineering, and incident response.
• Drive an AI‑first transformation: design SOAR playbooks, LLM‑assisted triage workflows, and machine‑learning‑based detections to reduce mean‑time‑to‑detect and mean‑time‑to‑respond.
• Lead and mentor the SOC/CSIRT team, raising technical expertise and fostering a security‑first culture.
• Collaborate with broader security and product teams to embed security controls into the AI‑native care platform.
• Define and execute a roadmap for scaling security operations as the company expands globally.

Required profile

• Proven experience leading security operations or SOC teams in fast‑growing, multi‑continent organizations.
• Strong understanding of AI and automation in security, with at least Level 1 AI fluency as defined by Sword.
• Ability to translate security strategy into concrete technical implementations and measurable outcomes.

Required skills

• SIEM architecture and detection engineering
• Incident response and CSIRT processes
• SOAR (Security Orchestration, Automation & Response) playbook design
• Large Language Model (LLM) assisted workflows
• Machine learning‑driven threat detection
• Automation and AI integration in security operations