Director, Threat Detection – Response

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as the senior incident commander and primary escalation point during significant, high-severity security incidents.

• Lead the incident response strategy across endpoints, networks, cloud, identity, and application layers.

• Supervise digital forensics and root cause analysis, facilitating the remediation of systemic vulnerabilities and minimizing fraud or financial losses.

• Guide the detection engineering strategy and ensure the development, tuning, and validation of high-fidelity detection logic.

• Spearhead hypothesis-driven threat hunting initiatives based on incident trends and the MITRE ATT&CK framework.

• Establish and integrate Cyber Threat Intelligence capabilities to identify and counteract emerging adversary TTPs pertinent to the payments sector.

• Propel enterprise logging and data pipeline strategy across both cloud and on-premises environments.

• Oversee, mentor, and cultivate senior incident responders, detection engineers, and threat hunters.

• Convert technical findings and incident results into actionable narratives for executive leadership and the board of directors.

⛳️ Requirements

• Bachelor's degree in Computer Science, Cyber Security, or a related field, or a combination of education and experience.

• Over 10 years of practical experience in information security.

• Extensive subject-matter expertise in incident response, detection engineering, and threat hunting.

• Proven hands-on expertise in managing complex security incidents, advanced threat hunting, and detection engineering across cloud, identity, network, and endpoint environments.

• Established history in a leadership capacity overseeing intricate security operations and high-performing technical teams.

• Proficient with advanced Incident Response tools, digital forensic methodologies, log analysis techniques, and managing detection rules in contemporary platforms.

• Strong expertise in log management and telemetry, including designing and managing log collection systems and data pipelines across cloud and on-premises environments.

• Experience in investigating attacks on AI agents, countering AI-driven threats, and incorporating AI agents into incident response workflows.

• Architectural comprehension of internal AI and agentic infrastructure, encompassing secure deployment, monitoring, and incident preparedness of in-house models and autonomous agent networks.

• Solid grasp of AWS, Azure, GCP, Windows/Linux systems, and modern identity platforms.

• Familiarity with the payments/fintech regulatory landscape, including a working knowledge of PCI-DSS.

• Exceptional communication skills, with the capability to brief executive leadership, legal, and compliance teams during high-pressure situations.

• Preferred certifications: GCFA, GCIH, GNFA, GCTI, OSCP, OSIR, CompTIA CySA+.

• Must be eligible to work in the United States; this role is not eligible for current or future sponsorship.

🏝️ Benefits

• Medical, Dental, & Vision Coverage.

• Flexible Paid Time Off.

• 401(k) + Match.

• Mental Health Support & Well-Being Program.

• Paid Maternity & Paternity Leave.

• Education Assistance.

• Company-funded Lifestyle Spending Account.