Senior SecOps Team Lead

Equativ
Paris, France
Hybrid

Who this role is best for

Strong fit for cloud security professionals with team leadership experience who can balance hands-on technical work and cross-functional collaboration in the ad tech domain.

Best fit for

  • Candidates with 8+ years in security engineering and 3+ years of public cloud production security, preferably GCP.
    — “8+ years in security engineering or SecOps, including 3+ years securing production on a public cloud — GCP strongly preferred”
  • Individuals experienced in defining and enforcing GCP security baselines and managing cloud-native security platforms.
    — “Define and enforce the GCP security baseline: organization policies, IAM and service-account hygiene, VPC Service Controls, KMS and Secret Manager”

Things to consider

  • The role requires fluency in both English and French for internal and external communication.
    — “Clear written and spoken English and French; able to explain risk to engineers, leadership and customers”
  • The position demands a high level of technical involvement, with 70% of time spent on hands-on work.
    — “roughly 30% of your time is spent on people management and stakeholders, 70% on technical leadership and hands-on work during incidents and key projects”

How to stand out

  • Emphasize your incident response leadership and post-mortem process in interviews.
    — “Lead security incidents end-to-end and run blameless post-mortems”
  • Showcase your ability to manage security KPIs and risks in your professional narrative.
    — “Report security operations KPIs and risks to the IT & Security lead”
  • Include experience with Wiz and Google SecOps tools, such as Chronicle and SCC.
    — “Hands-on experience with modern cloud-native security platforms such as Google SecOps (Chronicle), Security Command Center (SCC), and Wiz (or similar CNAPPs)”
Pace · Fast PacedCollaboration · HighAutonomy · MediumDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • managed a SecOps team
  • defined and enforced GCP security baseline
  • led security incidents end-to-end
  • owned cloud security posture
Typical background
8+ years in security engineering or SecOps2+ years managing a security team

Skills & requirements

Required

Security EngineeringSecopsCloud SecurityGCP SecurityIncident ResponseCloud-native Security PlatformsISO 27001

Preferred

Ad TechISO 27001 AuditsKubernetesGKEOktaCrowdstrike

Stack & domain

GCP Security BaselineIAM ModelOrg PoliciesVpc-scLoggingGKE SecurityGoogle Secops (chronicle)Security Command Center (scc)WizIncident ResponseDetectionVulnerability ManagementPentestThreat ModelingSASTSCASecret ScanningContainer ScanningISO 27001 AuditRfpsLeadershipTeam ManagementStakeholder CommunicationTechnical LeadershipIncident ManagementRisk AssessmentPrioritizationDecision-makingCustomer CommunicationProject ManagementGCP Professional Cloud Security EngineerCisspGCIHCloud SecuritySecurity ComplianceCloud-native SecuritySecurity OperationsSecurity Engineering

About the role

Original posting from Equativ via Lever

Equativ is an independent ad tech company. Our programmatic advertising platform runs at high scale, with production running entirely on Google Cloud Platform. Equativ is building its ISMS toward ISO 27001 certification target by the end of 2027. The SecOps team secures that platform and works with every team across Equativ.

The role:

You manage the SecOps team and own the day-to-day security operations of a full-cloud company. You build the team, grow its people and deliver the SecOps roadmap, which you define with the IT & Security lead.

You stay close to the technology: roughly 30% of your time is spent on people management and stakeholders, 70% on technical leadership and hands-on work during incidents and key projects.

Responsibilities:

People and team

Manage the SecOps engineers: 1:1s, objectives, annual reviews, CPF level assessments and career growth.

Run the team's rituals, plan and prioritize the SEC Jira backlog.

Represent SecOps in cross-team forums with R&D and Operations teams.

Report security operations KPIs and risks to the IT & Security lead.

Security operations

Define and enforce the GCP security baseline: organization policies, IAM and service-account hygiene, VPC Service Controls, KMS and Secret Manager.

Own cloud security posture with Wiz, and drive remediation with owning teams.

Own detection and response: log pipelines, SIEM use cases, alert quality, incident playbooks.

Lead security incidents end-to-end and run blameless post-mortems.

Run vulnerability management across cloud, containers, dependencies and external attack surface; track remediation SLAs.

Scope external pentests and follow findings through to remediation.

Embed security in the SDLC with R&D: threat modeling, SAST, SCA, secret and container scanning.

Own the operational evidence for the ISMS and ISO 27001 audit

Own the technical answers to security questionnaires and RFPs.

Must-have profile:

8+ years in security engineering or SecOps, including 3+ years securing production on a public cloud — GCP strongly preferred, AWS/Azure transferable.

2+ years managing a security team: hiring, reviews, coaching.

Strong GCP security knowledge: IAM model, org policies, VPC-SC, logging, GKE security.

Hands-on experience with modern cloud-native security platforms such as Google SecOps (Chronicle), Security Command Center (SCC), and Wiz (or similar CNAPPs).

Proven incident response leadership, including cloud incidents.

Experience running detection, vulnerability management and pentest programs.

Able to set priorities, say no and arbitrate between security risk and delivery.

Clear written and spoken English and French; able to explain risk to engineers, leadership and customers.

Nice to have:

Kubernetes / GKE hardening and runtime security.

Experience in ad tech or other high-throughput, latency-sensitive platforms.

Exposure to ISO 27001 or SOC 2 audits from the operations side.

Identity and endpoint stack: Okta, Google Workspace, CrowdStrike.

Certifications: GCP Professional Cloud Security Engineer, CISSP, GCIH.

Source: Equativ careers (Lever)

Similar roles

More roles at Equativ