Head of Security Operations

As the Head of Security Operations at Bumble, you should be mission-focused in protecting our users' data, our company’s infrastructure and our global operations. You will lead a team of passionate engineers and analysts to detect and neutralise the activity of bad actors across our networks, infrastructure, applications and users.

You expertly deploy detective and protective technology and thrive in an environment of experimentation. You grow members of your team along leadership and technical tracks and know how to manage others to expand their technical security skills. You will work closely with our workplace technology and engineering teams to identify and remediate vulnerabilities, implement strategic patterns for security best practices, and automate security processes. You and your team will also respond to security incidents and maintain compliance with industry and regulatory standards.

While this is a management position, we expect managers to be expert practitioners, able to lead by example, contribute at the highest level, and assess work based on their own professional experience and skill. Candidates should have deep, hands-on expertise with a range of open source and proprietary security tooling and practices, which they can integrate into a holistic modern security solution for Bumble.

This role is based in London and will report into our Chief Information Security and Trust Officer.

What You'll Do

• Hire and mentor a team of outstanding technical security professionals.
• Define Bumble's SecOps security standards and playbooks and analyse and improve Bumble's security architecture.
• Own and drive the architecture and design of the SOC, including the evaluation, selection and implementation of new security tools and practices.
• Identify, contain and guide the remediation of security threats and cyber attacks.
• Build strong team, company and external relationships to ensure Bumble collects, synthesises, utilises and contributes to threat intelligence initiatives.
• Drive tabletop and purple team detection and incident response exercises for security and privacy preparedness.
• Identify, implement and track SecOps KPIs.

Experience We Are Looking For

• Bachelor’s degree in Computer Science or related technical field; or equivalent publicly verifiable practical experience.
• Expert technical understanding of SOCs from the ground up including in depth knowledge of SOC architecture and design including strategies for logging, SIEM, automation, network segmentation, honeypots etc.
• Deep knowledge of modern OS security across Mac, Windows and Linux with expertise in scaled linux security.
• Ability to define, implement, automate and measure effective incident response playbooks.
• Knowledge of security architecture and market-leading security tools across vendors and open source.
• Experience in consuming threat intelligence feeds for enrichment and automation of playbooks.
• Confidence to report security performance metrics with accountability for accuracy and completeness.

About You

• Your values align strongly with the Bumble Inc. values: Growth, Kindness, Equity, Accountability, and Honesty.
• Deep personal motivation to be at the forefront of technology security in the detection and response domain.
• Being on-call shouldn’t be a burden to you or to team members. We want to be curious about our defences and filter noise to automate signal.
• Desire to be tested and proven; experience in a red and purple team environment where exercises and tests of capabilities are business as usualAbility to communicate with empathy when communicating about infrastructure events and incidents to operations & engineering.
• Be a constant learner who looks to solve interesting and challenging problems.
• Humble expert with a sense of urgency.
• Skilled at taking complex topics and making them simple.
• Transparent judgement and stands behind their decisions, right or wrong.