Earnest
Security Operations Lead
Job Summary
The Security Operations Lead is responsible for overseeing security monitoring, incident response, and threat management in a cloud-native environment, including AWS and Kubernetes. The role involves leading detection logic development, coordinating security incidents, managing threat intelligence, and collaborating with cross-functional teams to maintain security and audit readiness. Candidates should have extensive cybersecurity operations experience, leadership skills, and expertise with security tools and regulatory standards. The position offers a mix of remote work with monthly in-office collaboration in Oakland, along with comprehensive benefits and a focus on fostering a diverse and inclusive company culture.
Required Skills
Benefits
Job Description
Our mission is to make higher education accessible and affordable for everyone. We empower students with financial support and supercharge their ability to pay down their debt, so they can get on the right financial track, fast.
We build tools that help people feel in control of their financial future, including:
- Private student loans - low rates, people-first service, and flexible payments.
- Student loan refinancing - break free from high-interest rates or monthly payments.
- Scholarships - access to thousands of scholarships to help students pay less.
Earnies are committed to helping students live their best lives, free from the stress of student debt. If you’re as passionate as we are about our mission, read more below, and let’s build something great together!
The Security Operations Lead position will report to the Director of Security.
As the Security Operations Lead, you will:
- Oversee Earnest’s security monitoring and incident response operations, ensuring rapid detection and containment of threats.
- Lead the development and tuning of detection logic, response workflows, and vulnerability management across our cloud-native environment.
- Serve as incident commander during security events, coordinating cross-functional teams and managing communications with key stakeholders.
- Manage the threat intelligence program and proactively conduct threat hunting based on emerging indicators and TTPs.
- Partner with engineering, infrastructure, and compliance teams to embed security into day-to-day operations and maintain audit readiness.
- Mentor and guide junior team members, helping to build a resilient, high-performing security operations function.
About You:
- 8+ years of cybersecurity operations experience with a track record of leading incident response, threat detection, and vulnerability remediation.
- 2+ years in a formal leadership or program ownership role (SOC, IR, etc.).
- Expertise in modern cloud environments (e.g., AWS), Kubernetes, Linux, and SaaS applications.
- Proficient in tools such as SIEM, EDR/XDR, SOAR, IDS/IPS, vulnerability scanners, threat intel platforms.
- Experience responding to security incidents in regulated industries (e.g., fintech, healthcare).
- Strong communication and leadership skills – able to lead complex incidents and present findings to executive audiences.
- Knowledge of regulatory standards such as SOC 2, GLBA, SOX, NY DFS, etc.
- Certifications like GCIH, GCIA, GCFA, GREM, or CISSP are a plus.
- Willingness to travel to the Oakland office monthly to collaborate with other Earnies.
Even Better:
- Experience in fintech or another highly regulated environment.
- Background in digital forensics, malware analysis, or adversary emulation.
- Familiarity with frameworks like MITRE ATT&CK or OSC&R.
Where:
- This role will be based in the San Francisco Bay Area.
- While you’ll enjoy the flexibility of remote work, we also love to see our Earnies face-to-face! We ask you to join us at our Oakland office for 3 consecutive days a month for team collaboration and some fun. It's a chance to connect, share ideas, and maybe even grab some coffee together!
#LI-KB1
A little about our pay philosophy: We take pride in compensating our employees fairly and equitably. We are showcasing a range of your potential base salary based on the roles location. The successful candidate’s starting pay will also be determined based on job-related qualifications, internal compensation, candidate location and budget. This range may be modified in the future.
Earnest believes in enabling our employees to live their best lives. We offer a variety of perks and competitive benefits, including:
- Health, Dental, & Vision benefits plus savings plans
- Mac computers + work-from-home stipend to set up your home office
- Monthly internet and phone reimbursement
- Employee Stock Purchase Plan
- Restricted Stock Units (RSUs)
- 401(k) plan to help you save for retirement plus a company match
- Robust tuition reimbursement program
- $1,000 travel perk on each Earnie-versary to anywhere in the world
- Competitive days of annual PTO
- Competitive parental leave
What makes an “Earnie” culture:
- Drivers – Drivers are satisfied by making things happen, not coming along for the ride. They feel a strong sense of ownership for their projects and teams and demand high standards from themselves and others.
- Humility – Humble team players check their egos and consider the team’s needs above their own. They are self-aware of their strengths and opportunities for improvement.
- Growth Mindset – People with a growth mindset approach challenges and failures as learning opportunities. They seek feedback to improve, give feedback to others, and genuinely want to perform well.
At Earnest, we are committed to building an environment where our employees feel included, valued, and heard. Our belief is that a strong commitment to diversity, inclusion, equity, and belonging enables us to move forward with our mission. We are dedicated to adding new perspectives to the team and encourage anyone to apply if your experience is close to what we are looking for.
Earnest provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, veteran status, disability or genetics. Qualified applicants with criminal histories will be considered for the position in a manner consistent with the Fair Chance Ordinance.
Earnest
A financial technology company providing student loan refinancing, personal loans, and other lending solutions with flexible terms.
See more jobsSafe Remote Job Search Tips
Verify Employer Thoroughly
Research the company's identity thoroughly before applying. Check for a professional website with contacts, active social media, and LinkedIn profiles. Verify details across platforms and look for reviews on Glassdoor or Trustpilot to confirm legitimacy.
Never Pay to Get a Job
Legitimate employers never require payment for applications, training, background checks, or equipment. Always reject upfront payment requests or demands for bank details, even if they claim it's for purchasing necessary work gear on your behalf.
Safeguard Your Personal Information
Protect sensitive data like SSN, bank details, or ID copies. Share this only after accepting a formal, written job offer. Ensure it's submitted via a secure company system or portal, never through insecure channels like standard email attachments.
Scrutinize Communication & Interviews
Watch for communication red flags: poor grammar, generic emails (@gmail), vague details, or undue pressure. Be highly suspicious of interviews held only via text or chat apps; legitimate companies typically use video or phone calls.
Beware of Unrealistic Offers
If an offer's salary or benefits seem unrealistically high for the work involved, be cautious. Research standard pay for similar roles. Offers that appear 'too good to be true' are often scams designed to lure you into providing information or payment.
Insist on a Formal Contract
Always secure and review a formal, written job offer or employment contract before starting work or sharing final personal details. Ensure it clearly defines your role, compensation, key terms, and conditions to avoid misunderstandings or scams.