Manager, Cyber Security

Manager, Cyber Security Overview

Ping Identity is hiring a Cyber Security Manager to help run and mature its Cyber Security Engineering function. The role sits within a company focused on secure, seamless digital experiences and on building a culture that values individuality, inclusion, and strong collaboration. The position is based in the UK and is advertised as remote.

This is a hands-on leadership role for someone who can combine technical depth with operational judgement. The manager will be responsible for keeping the security engineering team organised, effective, and ready to respond to threats while also improving the way the team works over time. The work spans incident response, detection engineering, automation, secure engineering, on-call operations, and broader security process improvement across enterprise and SaaS environments.

What you will do

• Take ownership of the team’s daily operational delivery and make sure security engineering work is coordinated and progressing smoothly.
• Improve the team’s ability to deliver by strengthening planning, prioritisation, delegation, and execution practices.
• Develop the team’s capability across incident response, detection engineering, automation, and security operations.
• Lead, coach, and support team members so they can grow and perform effectively.
• Own the incident response process, including designing, refining, and implementing response playbooks.
• Coordinate incident response activity across multiple teams and disciplines when security events occur.
• Provide technical and operational guidance when reviewing system designs, changes, and operational risk.
• Help improve the weekly on-call rota, including escalation handling, response quality, handover quality, and readiness.
• Lead the design and implementation of security solutions that are robust, maintainable, and scalable.
• Support and shape detection engineering work across both enterprise systems and SaaS platforms.
• Identify operational gaps, security risks, and business areas that need improvement, then turn those findings into practical actions.
• Make sure the team’s priorities stay aligned with the wider Cyber Security Engineering roadmap and strategy.
• Work closely with engineering, infrastructure, product, and operations teams to deliver security improvements and roadmap commitments.
• Partner across the organisation to improve security outcomes throughout Ping Identity.

What the role requires

• Experience leading or managing security operations, security engineering, incident response, or another technical operations function on a day-to-day basis.
• Strong operational delivery experience, including planning work, setting priorities, delegating effectively, and driving continuous improvement.
• Experience improving team capability, refining processes, and developing technical skills within a security team.
• Direct incident response experience, including coordination of complex incidents involving several teams.
• Experience with security automation, including SOAR tooling and custom scripting.
• Experience working with SIEM systems, with Google Chronicle and YARA-L specifically mentioned as preferred.
• Good knowledge of cloud environments, especially AWS and GCP.
• Experience with container technologies such as Kubernetes and Docker, both in development and incident response contexts.
• Experience deploying, operating, or using endpoint detection and response tools.
• Experience leading cross-functional work and influencing stakeholders outside your direct reporting line.
• The ability to communicate priorities, technical risk, and delivery trade-offs clearly to both technical and non-technical audiences.
• Strong judgement, ownership, and decision-making during incidents and escalations.
• Participation in the team’s on-call rotation is mandatory.
• It would be beneficial if you have previously built or led a Security Operations Centre, Cyber Security Engineering team, Detection Engineering function, or similar technical operations group.
• It would also be beneficial if you have created operating models, team roadmaps, operational maturity plans, or capability development plans.
• Experience using threat intelligence and integrating it into security systems would be an advantage.

Team and culture

Ping Identity describes its environment as flexible and collaborative, with an emphasis on innovation and a startup-style mindset. The company says it values smart, kind, and motivated people, and it promotes a culture where employees are encouraged to bring their authentic selves to work. It also highlights employee resource groups, team-building events, and global volunteering and community initiatives.

The company is committed to inclusion and equal opportunity. It states that it welcomes people from all backgrounds and will consider all qualified applicants without discrimination based on protected characteristics.

Benefits and perks

• Generous paid time off and holiday allowance.
• Parental leave.
• Modern healthcare options.
• Retirement programmes.
• Education reimbursement support.
• Commuter offset support in certain locations.
• Competitive overall benefits and perks package.

How to apply

Applications are submitted through Ping Identity’s online Greenhouse application form. Applicants are asked to provide standard details such as name, email, phone number, location, resume, cover letter, and LinkedIn profile. The form also includes acknowledgements relating to confidentiality and the company’s privacy statement.

As part of the application process, candidates are asked to confirm whether they can provide proof of identity and legal right to work in the country where the job is based. They are also asked whether they currently need, or may need in the future, sponsorship to work in that country.

Degree Requirement: Not Specified

Visa Sponsorship May be