[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Bullish jobs](https://jobs.opennash.com/companies/bullish/) · [Search jobs](/search/) Bullish · New York # Manager / Sr. Manager, SecOps & Cyber Defense New York Full-time Manager or lead $185,000 - $235,000 Security Listed on Bullish’s official careers site. Posted August 10, 2026. Check that it is still open and apply there. [Apply on Bullish’s careers site →](https://bullish.wd3.myworkdayjobs.com/Bullish/job/New-York/Manager---Sr-Manager--SecOps---Cyber-Defense_JR2001269) [OpenNash Jobs](https://jobs.opennash.com/) / [Bullish](https://jobs.opennash.com/companies/bullish/) / Manager / Sr. Manager, SecOps & Cyber Defense ## Job description About Bullish Bullish is an institutionally focused global digital asset platform that provides market infrastructure and information services. These include: Bullish Exchange – a regulated and institutionally focused digital assets spot and derivatives exchange, integrating a high-performance central limit order book matching engine with automated market making to provide deep and predictable liquidity. Bullish Exchange is regulated in Germany, Hong Kong, and Gibraltar. CoinDesk Indices – a collection of tradable proprietary and single-asset benchmarks and indices that track the performance of digital assets for global institutions in the digital assets and traditional finance industries. CoinDesk Data - a broad suite of digital assets market data and analytics, providing real-time insights into prices, trends, and market dynamics. CoinDesk Insights – a digital asset media and events provider and operator of Coindesk.com, a digital media platform that covers news and insights about digital assets, the underlying markets, policy, and blockchain technology. Reports to: Head of Security Engineering ### Position Overview We are seeking an experienced, hands-on Manager / Sr. Manager of SecOps & Cyber Defense to lead, scale, and actively drive our 24/7 security detection and response capabilities in the US, UK, & EMEA. In this dual-capability role, you will lead a lean, highly technical group of SOC analysts and incident responders while remaining deeply connected to the engineering work. You will sit in the hot seat during major incidents, build high-efficacy detection engineering pipelines across cloud and hybrid infrastructure, and continuously elevate our threat hunting and triage posture. This role is based in NYC and will be required to work onsite at our office located in Chelsea a minimum of 4 days per week. The position reports to the Head of Security Engineering. ### Responsibilities Leadership & Team Operations Manage & Mentor: Lead and mentor a small, high-performing team of SOC Analysts and Incident Response engineers across multiple time zones. ### On-Call & Escalations Serve as the primary point of escalation for high-severity security incidents, managing the global operational shift structure and continuous coverage model. ### Metrics & Maturity Define and track key SOC operational metrics (MTTD, MTTR, false positive ratios, incident coverage against MITRE ATT&CK) to drive continuous improvement. ### Cross-Functional Collaboration Partner closely with Infrastructure, Cloud Platform, DevOps, Corporate IT, Legal, and Compliance teams during critical triage and investigation phases. ### Technical Execution & Incident Response Incident Management Drive end-to-end response for major security incidents—from initial detection, containment, and eradication to root-cause analysis and post-mortem reporting. ### Detection Engineering Design, write, and tune high-precision detection rules (SIEM, EDR, Cloud-native logs) to minimize noise and highlight sophisticated threat activity. ### Forensics & Triage Perform hands-on digital forensics (memory, disk, network artifact analysis) and reverse-engineer suspicious scripts/payloads when necessary. ### Threat Research & Readiness Conduct targeted research into emerging threat actor TTPs, zero-days, and cloud vulnerabilities to preemptively fortify detection capabilities and response playbooks. ### Adversarial Testing & Exercises Lead and participate in regular Red/Purple team operations and executive tabletop exercises to stress-test incident response readiness and validate control coverage. ### Threat Hunting Proactively hunt for undetected threat actor behavior using internal logs, intelligence feeds, and custom queries. ### SOAR & Automation Build and refine automated response playbooks using Python, API integrations, and SOAR tools to streamline repetitive analyst workflows. ### Experience & Qualifications 8+ years of dedicated, hands-on experience in SOC operations, threat detection, and security incident response. 2+ years of direct people management or formal team leadership experience, preferably overseeing a geographically distributed workforce. Deep operational expertise in investigating cloud-native threats (AWS, GCP, or Azure), container environments (Kubernetes, Docker), and modern SaaS infrastructure. Advanced proficiency with modern SIEM platforms, EDR/XDR suites, log aggregators, and SOAR tools. Strong scripting and automation skills in Python, Bash, or Go to automate triage tasks and query APIs. Strong knowledge of network protocols, cloud architecture, identity systems (Okta, Azure AD), and digital forensics fundamentals. Proven ability to stay calm, decisive, and communicative under pressure during high-severity security incidents. ### Nice-to-Have Prior experience in Financial Services, FinTech, Digital Assets, or high-throughput trading environments operating under strict regulatory audit standards (SOC 2, ISO 27001, SEC/FINRA frameworks). Relevant industry certifications such as GIAC (GCIH, GCFA, GNFA, GCDA), CISSP, or OSCP. Bullish US LLC & CoinDesk Inc. are committed to offering competitive compensation and benefits. The anticipated base salary for this position is $185,000 - $235,000 + discretionary annual target bonus + performance incentives/benefits. Offered salary will be reflective of job related knowledge, skills and commensurate experience. Bullish is proud to be an equal opportunity employer. We are fast evolving and striving towards being a globally-diverse community. With integrity at our core, our success is driven by a talented team of individuals and the different perspectives they are encouraged to bring to work every day. ## At a glance - Posted by the employer: Aug 10, 2026 - First seen by OpenNash: Oct 19, 2026 - Last checked: Oct 19, 2026 - Listed for: 70 days - Location: New York - Employment type: Full-time - Pay: $185,000 - $235,000[Apply on Bullish’s careers site →](https://bullish.wd3.myworkdayjobs.com/Bullish/job/New-York/Manager---Sr-Manager--SecOps---Cyber-Defense_JR2001269) ## More jobs at Bullish ### [Head of Blockchain Security](https://jobs.opennash.com/companies/bullish/jobs/01bbc499e2d0d1221a20/) New York ### [BSA/AML Officer](https://jobs.opennash.com/companies/bullish/jobs/5af353e720744ce1e85b/) New York ### [Creative Director](https://jobs.opennash.com/companies/bullish/jobs/51cf26d4751320a16772/) New York ### [Creative Producer](https://jobs.opennash.com/companies/bullish/jobs/91511a1b6b872cb164c6/) New York ### [Director, AI Platform & Enablement](https://jobs.opennash.com/companies/bullish/jobs/656f957ac1ac2ed80249/) New York ## Similar jobs at other companies ### [Cyber Defense & Incident Responder](https://jobs.opennash.com/companies/ntt/jobs/c214150e31a4ff7d5d41/) NTT · Merrifield, VA, US, United States ### [Cyber OT SecOps](https://jobs.opennash.com/companies/coca-cola/jobs/dfeb913255c2ffa9a0e6/) Coca-Cola · Atlanta, GA, US ### [Cyber Defense Principal Engineer](https://jobs.opennash.com/companies/alnylam-pharmaceuticals/jobs/e529d2ba08fa08bb2ec4/) Alnylam Pharmaceuticals · United States ### [Senior Cyber Defense Manager - Incident Response](https://jobs.opennash.com/companies/boyd-gaming/jobs/dc5454ef59bcbd6ec9e8/) Boyd Gaming · Las Vegas, United States ### [Cyber Defense, Adversary Emulation Director](https://jobs.opennash.com/companies/mizuho-financial/jobs/80572c1e60feac51dd38/) Mizuho Financial · MetroPark OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)