Senior Manager, Security Infrastructure & Technology

StubHub is on a mission to redefine the live event experience on a global scale. Whether someone is looking to attend their first event or their hundredth, we’re here to delight them all the way from the moment they start looking for a ticket until they step through the gate. The same goes for our sellers. From fans selling a single ticket to the promoters of a worldwide stadium tour, we want StubHub to be the safest, most convenient way to offer a ticket to the millions of fans who browse our platform around the world. The Security Operations team owns incident response, threat detection, SIEM engineering, log management, and third-party security risk forming the frontline defense for StubHub's global operations. As a Security Operations Engineer you will bring deep hands-on experience in incident response and threat detection. You will help extend the existing tooling, automation, and detection infrastructure that enables the team to operate at scale. This is not a purely operational role; we are looking for an engineer who writes production-quality code to solve security problems, architects detection pipelines, and help mature StubHub’s SOC-less approach to Detection & Response. You will work closely with Cloud and Infrastructure Security, Identity Engineering, and cross-functional stakeholders. Your work will directly shape how StubHub detects, responds to, and learns from threats. Location: Hybrid (3 days in office/2 days remote) – New York, NY or Century City, CA    What You'll Do: * Incident Response * Lead and coordinate security incident response end-to-end: detection, triage, containment, eradication, recovery, and post-incident review * Develop and maintain incident response playbooks * Drive root cause analysis and translate findings into durable improvements to detection and prevention capabilities * Act as an escalation point for complex or high-severity incidents across the organization * Threat Detection * Design, build, and tune detection rules, event correlation logic, and behavioral analytics across cloud, endpoint, network, and application data sources * Assist in maintaining a threat model for StubHub's environment and mapping detection coverage to the MITRE ATT&CK framework * Proactively hunt for threats and indicators of compromise across the environment * Collaborate with red team and pen test partners to validate detection coverage and identify gaps * SIEM & Log Engineering * Continually improve SIEM capabilities including data ingestion pipelines, normalization, enrichment, and alerting workflows * Own log collection strategy: define what gets collected, at what fidelity, and for how long across cloud providers, SaaS applications, endpoints, and internal services * Write and maintain parsers, ETL pipelines, and data transformation logic to ensure high-quality signal in the SIEM * Own and operate security tooling where needed (SIEM, SOAR, EDR, etc.) * Security Automation & Tooling * Write internal software in Python, Go, or similar  to automate detection, response, enrichment, and reporting workflows * Build integrations between security tools, internal APIs, and third-party services to accelerate analyst workflows and reduce mean time to respond * Develop dashboards, metrics, and reporting to communicate operational health and coverage to security leadership * Contribute to shared security infrastructure and internal libraries used across the security engineering organization * Third-Party Security * Support the third-party security program by evaluating vendor security posture, reviewing assessments, and triaging risk findings * Build or maintain tooling to automate third-party risk intake, tracking, and reporting * Collaborate with Legal, Procurement, and Engineering to ensure third-party risks are identified and remediated appropriately What You've Done: * 3+ years of experience in security engineering, security operations, or a related discipline * Demonstrated, hands-on experience leading incident response efforts, including complex, multi-system investigations * Strong threat detection engineering experience: writing detection rules, tuning alerts, building correlation logic, and reducing false positive rates at scale * Proficiency in at least one programming or scripting language (Python strongly preferred; Go, Ruby, or Bash also relevant) — you regularly write code to solve security problems, not just configure tools * Deep familiarity with SIEM platforms (e.g., Splunk, ELK, Chronicle, Panther, or similar) including query languages and datra data onboarding. * Experience with cloud environments (AWS, GCP, or Azure) and the associated log sources, threat models, and detection strategies * Strong understanding of attacker tactics, techniques, and procedures (TTPs); experience mapping detections to MITRE ATT&CK * Excellent written and verbal communication skills; able to convey technical risk clearly to non-technical stakeholders Preferred Experience:  * Experience operating in a SOC environment, either in-house or as part of an MSSP * Familiarity with SOAR platforms and automation-driven response workflows * Experience with threat intelligence platforms and operationalizing threat feeds into detection pipelines * Prior involvement in third-party or vendor security risk programs * Experience at high-growth technology companies or marketplaces where scale and velocity present unique security challenges * Familiarity with data engineering concepts — streaming pipelines, schema design, log normalization — applied to security contexts * Relevant certifications (GCIH, GCIA, GCFE, OSCP, or equivalent) are a plus, but not required What We Offer: * Accelerated Growth Environment: An environment designed for swift skill and knowledge enhancement, where you have the autonomy to lead experiments and tests on a massive scale. * Top Tier Compensation Package: Competitive base, equity, and upside that tracks with your impact. * Flexible Time Off: Enjoy unlimited Flex Time Off, giving you the flexibility to manage your schedule and take time to recharge as needed. * Comprehensive Benefits Package: Prioritize your well-being with a comprehensive benefits package, featuring 401k, and premium Health, Vision, and Dental Insurance options. The anticipated gross base pay range is below for this role. Actual compensation will vary depending on factors such as a candidate’s qualifications, skills, experience, and competencies. Base annual salary is one component of StubHub’s total compensation and competitive benefits package, which includes equity, 401(k), paid time off, paid parental leave, and comprehensive health benefits.  Salary Range $200,000—$250,000 USD About Us  StubHub is the world’s leading marketplace to buy and sell tickets to any live event, anywhere. Through StubHub in North America and viagogo, our international platform, we service customers in 195 countries in 33 languages and 49 available currencies. With more than 300 million tickets available annually on our platform to events around the world -- from sports to music, comedy to dance, festivals to theater -- StubHub offers the safest, most convenient way to buy or sell tickets to the most memorable live experiences. Come join our team for a front-row seat to the action.    For California Residents: California Job Applicant Privacy Notice found here [https://img.vggcdn.net/webresources/PDF/Privacy_Notice_for_Job_Applicants_California.pdf]   We are an equal opportunity employer and value diversity on our team. We do not discriminate on the basis of race, color, religion, sex, national origin, gender, sexual orientation, age, disability, veteran status, or any other legally protected status.

WHO WE ARE The real world is the next frontier, and at Metropolis, we are creating the artificial intelligence to make it responsive. We are pioneering the Recognition Economy — a future where mundane repetition disappears and being known unlocks access, comfort and belonging everywhere you go. From transforming parking into a seamless drive-in, drive-out experience for millions of Members to expanding our intelligence layer across retail and hospitality, we are building a world that feels instinctive and magical. The future isn’t coming; it’s here, and we need builders, innovators and problem solvers to help us create it. WHO YOU ARE Metropolis is seeking a Governance, Risk, and Compliance (GRC) Analyst to join our expanding Security team. Reporting to the Senior Manager, GRC, you will mature information security policies, drive employee security awareness, and pioneer our AI governance framework. You will partner across Technology, Legal, Internal Audit, Procurement, and People Operations to safeguard customer trust and support operational excellence.  WHAT YOU'LL DO * Author, update, and enforce corporate security policies to guarantee cross-departmental compliance * Deploy and manage required information security training campaigns as the platform owner * Transform static policies into interactive modules with comprehension quizzes for mandatory sign-offs * Establish and enforce an internal AI governance framework with Data, Legal, and Tech teams * Conduct structured risk assessments on emerging tools and internal AI models to maintain behavioral guardrails * Report training metrics, policy exceptions, and risk postures directly to senior management * Review vendor security profiles and software pipelines to mitigate security risk WHAT WE'RE LOOKING FOR * 3+ years of experience in information security GRC, cybersecurity training, or technology compliance * Proven track record of managing required security awareness programs and driving cross-functional accountability * Experience with modern training orchestration platforms and understanding of AI and machine learning data security * Working knowledge of standard industry frameworks, specifically SOC 2 and PCI-DSS * Communication skills with the ability to explain complex regulatory needs to non-technical employees * Bachelor’s degree in Cybersecurity, Information Systems, or an equivalent technical discipline  WHILE NOT REQUIRED, THESE ARE A PLUS: * GRC certifications such as CISA or CRISC ---------------------------------------------------------------------------------------------------------------------------------- 4 Days in Office: Metropolis values in-person collaboration to drive innovation, strengthen culture, and enhance the Member experience. Our corporate team members hold to our office-first model, which requires employees to be on-site at least four days a week, fostering organic interactions that spark creativity and connection When you join Metropolis, you'll join a team of world-class product leaders and engineers, building an ecosystem of technologies at the intersection of parking, mobility, and real estate. Our goal is to build an inclusive culture where everyone has a voice and the best idea wins. You will play a key role in building and maintaining this culture as our organization grows. The anticipated base salary for this position is $100,000.00 USD to $135,000.00 USD annually. The actual base salary offered is determined by a number of variables, including, as appropriate, the applicant's qualifications for the position, years of relevant experience, distinctive skills, level of education attained, certifications or other professional licenses held, and the location of residence and/or place of employment. Base salary is one component of Metropolis’s total compensation package, which may also include access to or eligibility for healthcare benefits, a 401(k) plan, short-term and long-term disability coverage, basic life insurance, a lucrative stock option plan, bonus plans and more. #LI-CM1 #LI-Onsite Metropolis may utilize an automated employment decision tool (AEDT) to assess or evaluate your candidacy for employment or promotion. AEDTs are used to assist in assessing a candidate’s application relative to the required job qualifications and responsibilities listed in the job posting. As part of this process, Metropolis retains data relevant to your candidacy, including personal information, for a period that is reasonably necessary for the use of the tool. If you are hired for the position, your data may become part of your employee records. Metropolis Technologies is an equal opportunity employer. We make all hiring decisions based on merit, qualifications, and business needs, without regard to race, color, religion, sex (including gender identity, sexual orientation, or pregnancy), national origin, disability, veteran status, or any other protected characteristic under federal, state, or local law.