Ataccama is the agentic data trust company. Organizations worldwide rely on Ataccama ONE, the agentic data trust platform, to ensure data is accurate, accessible, and trusted for every decision and system. Powered by the ONE AI Agent, Ataccama ONE brings autonomy to data quality and governance, continuously monitoring, improving, and explaining the reliability of data across complex enterprise and multi-agent environments. At the core of the platform is Ataccama’s market-leading data quality, with modules built around it to unify data quality monitoring, catalog, lineage, observability, and reference data management, ensuring data is consistent and explainable. This quality-first foundation makes data the engine of trust, powering AI, analytics, and operations with confidence.
Recognized as a Leader in the 2026 Gartner Magic Quadrant for Augmented Data Quality and positioned furthest in Completeness of Vision, Ataccama continues to set the standard for enterprise-grade data trust.
Our people are located across the globe. They succeed by collaborating as a team and thrive in our company culture defined by these core values:
Challenging Fun
ONE Team
Customer Centric
Candid and Caring
Aim High
As Manager, Security Operations you will lead the hands-on, defensive security of Ataccama's product and cloud environment. Reporting to the CISO, you will own detection and incident response, vulnerability management, and cloud security posture across all of our deployment models, and lead a small, highly autonomous team of security specialists. Beyond keeping operations running, you will identify, propose, and execute security improvement initiatives end to end — from new WAF deployment as our ingress evolves to plugging product audit logs into our SIEM. We are becoming an AI-native company, and you will be expected to adopt AI tooling in your own work and help the security function do the same. This is a delivery role in an environment that runs on shared ownership and influence, not just formal authority — you will land security outcomes primarily by building credibility and alignment across engineering, platform, and IT, not only by issuing mandates.
Key Responsibilities:
Detection & Incident Response: Own security monitoring, detection, and incident handling end to end. Lead response across teams, turn incident learnings into preventive improvements, and manage the relationship with our external SOC partner.
Vulnerability Management: Run vulnerability management across the product and environment — triage, risk-based prioritization, remediation orchestration, and customer-facing CVE response — and mature it into a sustainable, de-concentrated program.
Cloud Security Posture: Own cloud-native security posture and runtime protection at scale (multi-cloud, Kubernetes), and monitor our external attack surface across multi-tenant SaaS, single-tenant, and customer-managed deployments.
Infrastructure & IT Security: Oversee the operational and corporate security surface — endpoint, infrastructure, and IT security operations.
Cross-Team Delivery: Drive security work through teams you don't own — engineering, platform, cloud/ops, and IT — sequencing and tracking multi-team initiatives to completion in an agile environment without formal project-management processes.
Team Leadership: Lead and develop a small team of security specialists. Set clear, verifiable expectations, delegate effectively, and report upward on milestones and progress rather than low-level detail.
Tooling & Program Maturity: Drive owned initiatives — SOC enablement, vulnerability-management maturity, detection engineering, and security tooling — into tangible, visible outcomes on committed timelines.
Customer & Technical Assurance: Represent security on technical matters — vulnerabilities, pentest findings, CVE response, and the technical sections of customer security questionnaires and audits.
Qualifications and Skills:
7+ years in technical security, with demonstrable depth in security operations and incident response; prior team leadership or management experience.
Strong, hands-on background across the security stack (CISSP-level breadth), with incident response as a sharp specialist edge. Relevant certifications (e.g. GCIH, GCIA, cloud-security certifications) are useful evidence but not required.
Cloud security experience across major providers and container orchestration (Kubernetes) is welcome, along with familiarity across SaaS, single-tenant, and hybrid deployment models.
A track record of driving security outcomes through teams you don't directly control, using influence and credibility rather than formal authority.
Strong people-leadership skills — specifically at setting expectations, delegating and managing semi-formal projects, and developing autonomous senior specialists and junior talent.
Comfort operating without heavy process or project-management scaffolding; you supply the structure — clear milestones, visible status, active dependency-chasing.
Excellent communication skills and the emotional intelligence to thrive in a flat, low-deference, multicultural engineering culture.
Fluent English; Czech or Slovak is an advantage.
Perks & Benefits
• Long-Term Incentive Program
• 2 sick days and 25 days of vacation, with the option to request additional Flexible Time-Off days when needed
• The Global Family Support Program - a paid leave program to help all parents focus on the new addition to their family
• Flexible working hours & hybrid work setup
• Benefit Plus - flexible employee benefit platform (incl. Multisport card)
• Annual package for mental health support
• "Bring Your Friend" referral program
• Shared company cards for free entrance to Prague Zoo & Botanical garden
• Company bikes, longboards, e-scooters
• Conference tickets to the best industry events of the year
• Online courses & company access to Udemy to hone your skills
• Access to paid AI tools
• Company library, where you can even suggest the best educational books for us to order
• Kitchens stocked with fresh fruit and juice, teas, and the best coffee
Work Equipment
• Company laptop
• Company mobile phone + SIM card & package of mobile data
At Ataccama, our core values are Candid & Caring, so we are upfront about our process and details that are important to you. We sometimes use AI tools to help us with things like reviewing applications, taking notes from screening conversations, scheduling interviews, or supporting assessments. These tools make the process smoother and fairer — but don’t worry, they never make the final decision. Every hiring decision is made by our Talent Acquisition Partners and Hiring Managers, with AI only acting as a helpful assistant. We believe technology should support the process, not replace the human touch.
We currently use AI-assisted tools - Metaview for interview notes and Lever Talent Fit to help highlight key experience. If you have any questions or concerns, feel free to reach out to us at jobs@ataccama.com, making reference to AI Act Inquiry in the subject line.
While we highly value cooperation with all our business partners, we don’t accept unsolicited resumes from any sources other than directly from a candidate. We reserve the right not to pay any fee for sending an unsolicited offer containing the details or resume of a job candidate, even if the relevant candidate is employed by our company.
