Manager, InfoSecurity Operations

Create a healthier, brighter future for pets, pet parents and people!

If you want to make a real difference, create an exciting career path, feel welcome to be your whole self and nurture your wellbeing, Petco is the place for you.

Our core values capture that spirit as we work to improve lives by doing what’s right for pets, people and our planet.

• We love all pets like our own
• We’re the future of the pet industry
• We’re here to improve lives
• We drive outstanding results together
• We’re welcome as we are

Petco is a category-defining health and wellness company focused on improving the lives of pets, pet parents and Petco partners. We are 29,000 strong and operate 1,500+ pet care centers in the U.S., Mexico and Puerto Rico, including 250+ Vetco Total Care hospitals, hundreds of preventive care clinics and eight distribution centers. We’re focused on purpose-driven work, and strongly believe what’s good for pets, people and our planet is good for Petco.

We're seeking a hands-on Security Operations Manager to lead security monitoring, incident response, and platform engineering for our retail, corporate, and ecommerce operations. This is a player-coach role requiring deep technical execution (60-70% of time) and team leadership.

This position owns our 24/7 security operations capability, manages core security platforms, leads incident response efforts, and drives critical security engineering projects to completion. The role works closely with our external managed security service provider (MSSP) and serves as the technical escalation point for security events affecting stores, ecommerce platform, distribution centers, and corporate infrastructure.

This role is based in San Diego, California.

What You'll Do

Incident Response & Threat Management (25%)

• Lead real-time response to security incidents, making containment and remediation decisions that minimize business impact
• Manage escalations from our MSSP and make rapid triage decisions on security alerts
• Conduct post-incident reviews and drive remediation of root causes
• Develop and maintain incident response runbooks, playbooks, and procedures

Security Platform Engineering & Architecture (40%)

• Own architecture, deployment, and optimization of security operations stack including SIEM, EDR, NDR, SOAR, and related detection/response platforms
• Drive complex security engineering projects from conception through production deployment, including enterprise-scale initiatives like secure web gateway deployments, network security architecture, and cloud security tooling
• Develop detection rules, automation workflows, and integrations to improve mean-time-to-detect (MTTD) and mean-time-to-respond (MTTR)
• Design and implement security solutions protecting network infrastructure, cloud environments, and data across retail locations, corporate, and ecommerce operations
• Troubleshoot complex security platform issues and optimize configurations for performance and efficacy

Vendor & Partner Management (10%)

• Serve as primary technical liaison with our managed security service provider, managing SLAs, escalations, and service quality
• Evaluate and onboard new security technologies and services
• Coordinate with networking, cloud, and infrastructure teams on security architecture decisions

Team Leadership & Development (25%)

• Directly manage and mentor a team of 3 security professionals
• Provide technical direction, skill development, and career coaching
• Build team capabilities in key areas like cloud security incident response
• Maintain on-call rotation and ensure team readiness for 24/7 incident response
• Set clear performance expectations and deliver regular feedback

Required Qualifications

• 5+ years hands-on information security experience with at least 3 years focused on security operations, incident response, or security engineering
• 2+ years people management experience leading security analysts or engineers
• Proven track record executing complex security platform or infrastructure deployments from start to finish
• Hands-on technical expertise with at least 3 of the following platform categories:
  • SIEM platforms (e.g., Splunk, Microsoft Sentinel, Chronicle, Elastic, Sumo Logic, DataDog)
  • Endpoint Detection & Response / EDR (e.g., CrowdStrike, SentinelOne, Microsoft Defender, Carbon Black)
  • Network Detection & Response / NDR (e.g., ExtraHop, Vectra, Darktrace, Corelight)
  • Security Orchestration, Automation & Response / SOAR platforms
  • Secure Web Gateways, Cloud Access Security Brokers, or Zero Trust Network Access solutions
  • Next-Generation Firewalls, IDS/IPS, or Network Access Control systems
• Direct experience leading or participating in security incident investigations, containment, and remediation
• Strong enterprise networking knowledge including network architecture, routing/switching, and SD-WAN
• Excellent communication skills for coordination of incident response efforts

Strongly Preferred

• Experience with secure web gateway or SASE solutions (e.g., Zscaler, Netskope, Palo Alto Prisma Access, Cato)
• Cloud security experience (AWS, Azure, GCP) including security tooling, architecture, and incident response
• Scripting and automation skills (Python, PowerShell, Bash) for security tooling and response automation
• Security certifications (CISSP, GCIH, GCIA, GMON, GNFA, CISM)
• Experience with PCI-DSS, SOC 2, or ISO 27001 compliance frameworks
• Experience managing relationships with MSSPs or managed detection and response providers
• Retail or ecommerce security experience

What Makes You Successful In This Role

• Execute technical projects independently without extensive oversight
• Comfortable working hands-on with security platforms while developing team capabilities
• Take ownership when projects stall or incidents occur
• Anticipate dependencies and blockers, solving problems proactively
• Translate technical security concepts effectively for both technical and non-technical audiences
• Work effectively with or without dedicated project management support

Education

Bachelor's degree in Computer Science, Information Security, Information Technology, or related technical field preferred. Equivalent hands-on experience will be considered.

Work Location & Schedule

• San Diego, California
• Hybrid schedule with 3 days per week (Tue-Thu) on-site at Petco’s National Support Center
• Flexibility required for incident response outside normal business hours
• Occasional travel may be required (less than 10%)

#LI-CS1

#CORP

Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Petco Animal Supplies, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, protected veteran status, or any other protected classification.

The pay ranges outlined below are presented in accordance with state-specific regulations. These ranges may differ in other areas and could be subject to variation based on regulatory minimum wage requirements. Actual pay rates will depend on factors such as position, location, level of experience, and applicable state or local minimum wage laws. If the regulatory minimum wage exceeds the minimum indicated in the pay range below, the regulatory minimum wage will be the minimum rate applied.

/ year

For a more detailed overview of Petco Total Rewards, including health and financial benefits, 401K, incentives, and PTO -see https://careers.petco.com/us/en/key-benefits

To translate this webpage to Spanish or other languages on your internet browser click the translate button to the right of your browser address bar. Additional instruction can be found here: https://support.google.com/chrome/answer/173424?hl=en-GB&co=GENIE.Platform%3DDesktop

Para traducir esta página web al español u otros idiomas en su navegador de Internet, haga clic en el botón de traducción a la derecha de la barra de direcciones de su navegador. Puede encontrar instrucciones adicionales aquí:

https://support.google.com/chrome/answer/173424?hl=en-GB&co=GENIE.Platform%3DDesktop