Director, Cybersecurity Operations

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead the Security Operations and Incident Response, Security Engineering, Vulnerability Management, and Threat Intelligence.

• Manage the MDR relationship, encompassing SLA management, escalations, detection tuning, and quarterly threat hunt reviews.

• Oversee incident response activities, including runbooks, major incident coordination, executive communication, and root cause analysis.

• Supervise SOC detection engineering, SIEM rules, SOAR playbooks, and automated response actions.

• Direct and develop the security analyst team while reallocating resources towards MDR validation, threat hunting, and stakeholder reporting.

• Manage endpoint, identity, cloud, and application security engineering lanes.

• Drive security architecture reviews and make engineering decisions for large or complex IT projects.

• Formulate the security tooling strategy and assess, select, and retire security tools as necessary.

• Promote automation-first practices, including IaC security gates, CI/CD security, CSPM auto-remediation, and SOAR workflows.

• Lead the operationalization of threat intelligence, vulnerability management, purple team initiatives, control validation, and threat modeling programs.

• Oversee Application Security, secure SDLC, code review gates, SAST/DAST tooling, and collaborate with Product and Engineering teams.

• Manage cloud security posture management, cloud workload protection, cloud IAM governance, and cloud-native security architecture.

• Establish a team-wide AI security posture, focusing on model security, prompt injection testing, and governance of AI tool access.

• Enhance MDR deployment and integrate outputs with SIEM, IAM, and compliance evidence workflows.

• Evaluate emerging security technologies and provide build/buy/partner recommendations to the CISO.

• Lead, develop, and manage the performance of a streamlined engineering team.

• Collaborate with the Director of Cyber GRC to report metrics on incidents, controls, MDR, vulnerabilities, and team development to the CISO.

⛳️ Requirements

• Over 15 years of progressive experience in information security, including a minimum of 7 years in a security leadership role.

• Proven ownership of a security operations or engineering function at the Director or equivalent level.

• Experience in operating and enhancing an MDR deployment (such as CrowdStrike Falcon Complete, Arctic Wolf, Expel, or similar) within a corporate environment.

• Practical experience in at least two areas: security engineering, penetration testing/offensive security, cloud security, application security, or incident response.

• Demonstrated ability to deploy or mature security automation, including SOAR playbooks, detection engineering, IaC security, or CI/CD pipeline security.

• Knowledge of cloud-native security (AWS, Azure, or GCP), incorporating CSPM, cloud IAM, and workload protection.

• Familiarity with NIST SP 800-171, ISO 27001, and SOC 2 standards.

• Understanding of the vulnerability management lifecycle, including scanning, prioritization, remediation tracking, and SLA enforcement.

• Acquainted with SAST/DAST tooling, secure SDLC processes, and CI/CD security gate integration.

• Insight into IAM security governance, including PAM, access review programs, and SSO/MFA architecture.

• Exceptional communication skills with executives, clients, and regulatory bodies.

• A Bachelor's degree in Information Security, Computer Science, Engineering, Business, or a related field is required.

• Professional certifications such as CISSP, CISM, CISA, GPEN, GCIA, or other GIAC certifications are highly preferred.

• A Master's degree or MBA with a focus on security is preferred.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Retirement savings plan with company matching.

• Opportunities for continuous learning and professional development.

• Flexible working arrangements to promote work-life balance.