Security Operations Tech Lead

Gett is a Ground Transportation Solution with the mission to organize all the best mobility providers (delivery, corporate fleet, ride-hailing, taxi, enterprise solutions like car pooling, and more) in one global platform, with great UX - optimizing the entire experience from booking and riding to invoicing and analytics, to save businesses time and money. We work with a third of the Fortune 500 companies and have over 17K active business customers across the world.

As our SecOps Technical Lead, you will lead the strategy and execution of our cybersecurity defense. This is a senior, hands-on role for an expert who can manage complex security incidents while also building the infrastructure to prevent them. You will be the technical authority for our incident response, drive security automation, and ensure our external partners (MSSP) deliver top-tier results. We are looking for a reliable leader who can balance deep technical "deep-dives" with a strategic view, helping us scale our security operations and stay resilient against evolving threats.

Responsibilities

• Monitoring & IR: 24/7 security incident alerting and primary response for MSSP escalations.

• Security Engineering: Management of tools including Netskope, Crowdstrike, Okta, and Sublime.

• Automation: Developing automated runbooks for incident response and change management.

• Vulnerability & Threat Management: Managing infrastructure assessments, penetration testing, and threat intelligence.

• Compliance: Overseeing ZTNA, PCI quarterly scans, and security auditing for AD and Firewalls.

• Governance: SLA/KPI tracking for MSSPs and device posture management via Intune/Jamf.

Future Initiatives

• AI Security: Implementing controls for safe AI environment operations.

• Proactive Defense: Expanding threat hunting, deception technologies (honeypots), and CTEM/BAS.

• Hardening: Establishing CIS baseline configurations for SaaS, IaaS, and endpoints.

• Advanced Access: Expanding PAM beyond Okta and implementing IAM conditional access.

Requirements

• Experience: 7+ years of experience in Security Operations (SOC) or Incident Response, with at least 2 years in a senior/principal or technical lead capacity.

• SOC Maturity & Strategy: Proven track record of designing SOC strategies, establishing KPIs, and driving an operation from a reactive state to a mature, proactive, and highly automated environment.

• Technical Mastery: Deep, hands-on experience with EDR, SIEM, SOAR, and DLP platforms. Specific experience with CrowdStrike, Netskope, or Okta is a major advantage.

• Cloud & Identity: Strong understanding of cloud environments (AWS/GCP), SaaS security, and Zero Trust Network Access (ZTNA).

• Crisis Management: Proven track record of leading complex cyber incident responses under pressure with excellent stakeholder communication skills.

• Automation Mindset: Experience or strong familiarity with integrating AI tools, LLMs, or autonomous agents into security operations is highly desirable.

• Education/Certification: Relevant certifications (e.g., CISSP, GCIH, GCFA) or an equivalent technical background in Computer Science/Cyber Security.

• Mindset: A proactive, disciplined professional with high ownership and the ability to influence technical and non-technical teams without formal authority.

At Gett, we’re committed to creating an inclusive, respectful environment where everyone feels valued and empowered to succeed. We believe that diversity drives innovation, and we’re proud to offer equal opportunities to all—regardless of age, race, gender identity, sexual orientation, disability, or any other characteristic. If you need accommodations during the recruitment process, please contact us at recruitment.il@gett.com ,and we’ll do our best to support you. Click here to view our privacy policy.