Developer Security Operations Manager

📋 Description

• • Own the end-to-end health of Plooto’s production environment: you will set daily, weekly, and quarterly priorities for DevOps, Security, and IT, ensuring every sprint ends with measurable gains in reliability, security, and cost-efficiency.
• • Translate high-level engineering roadmaps into detailed technical execution plans—breaking epics into user stories, sizing work, and sequencing tasks so that releases land on time without compromising quality or compliance.
• • Champion a culture of continuous improvement by leading post-incident reviews, root-cause analyses, and blameless retrospectives; turn lessons learned into automated safeguards, tighter monitoring thresholds, and clearer runbooks.
• • Architect and refine CI/CD pipelines that push code from laptop to production in minutes, not hours—leveraging container orchestration, infrastructure-as-code, and progressive deployment strategies to eliminate manual steps and reduce rollback risk.
• • Keep a watchful eye on cost and performance: right-size cloud resources, negotiate reserved instances, and implement auto-scaling policies that keep customer latency under 200 ms while trimming monthly spend.
• • Serve as the primary security evangelist—embedding SAST/DAST scans, secrets management, and least-privilege IAM policies into every stage of the SDLC so that SOC 2, ISO 27001, and PCI controls are satisfied by design, not by exception.
• • Mentor a distributed team of DevOps engineers, security analysts, and IT specialists through weekly 1:1s, quarterly growth plans, and hands-on pairing sessions; turn junior contributors into confident decision-makers and senior engineers into thought leaders.
• • Build trust with Finance, Customer Success, and Product by publishing transparent OKR dashboards, risk registers, and uptime SLA reports—translating technical metrics into business impact that non-technical stakeholders can act on.
• • Stay battle-ready for high-severity incidents: jump on bridges, coordinate war-room Slack channels, and craft concise executive summaries that keep leadership informed while your team restores service.
• • Cultivate vendor relationships that feel like extensions of the team—negotiate SLAs, conduct quarterly business reviews, and run proof-of-concepts to ensure third-party tools integrate cleanly and deliver ROI.
• • Balance strategic vision with tactical execution: when priorities shift, you can still open a Terraform PR, tune a Prometheus alert, or patch a CVE before end-of-day.
• • Leave the organization better than you found it—document tribal knowledge, automate toil, and create career ladders that make Plooto the place where top DevSecOps talent wants to grow.