Director of Cyber Security

Director / Head of Incident Response & Security Operations

Overview

We are seeking a seasoned cybersecurity leader to own and evolve our Incident Response and Security Operations capabilities. This individual will operate at the intersection of deep technical expertise and executive communication—guiding teams through high-pressure security incidents while translating complex threats into clear, actionable insights for business leadership.

You will play a critical role in strengthening our organization’s ability to detect, respond to, and proactively mitigate threats, while building a resilient, forward-thinking security operations program.

What You’ll Do

• Lead the development and execution of both proactive and reactive security operations strategies
• Partner with executive leadership (including CISO and business stakeholders) to define and communicate security program metrics, risk posture, and progress
• Drive alignment between engineering, security, and business teams during incidents and strategic initiatives
• Build and scale a high-performing security operations and incident response team
• Act as the senior incident commander during high-impact security events
• Guide teams through real-time incident response , ensuring effective containment, remediation, and recovery
• Oversee investigations involving:
• Insider threats
• Advanced persistent threats (APT)
• Stay ahead of emerging threats by monitoring dark web activity, threat intelligence feeds, and global security trends

Threat Detection & Engineering Collaboration

• Drive advancements in threat detection, hunting, and response capabilities
• Oversee and optimize:
• Logging and telemetry pipelines
• Ensure comprehensive visibility across systems, tools, and data sources
• Partner with engineering to translate incidents into actionable remediation plans

Operational Excellence

• Establish and track KPIs, SLAs, and operational metrics for security operations
• Implement continuous improvement frameworks for detection, response, and recovery
• Lead efforts to automate workflows and improve operational efficiency
• Ensure processes are scalable, resilient, and adaptable to evolving threats

Team Development

• Recruit, mentor, and retain top cybersecurity talent
• Foster a culture of accountability, innovation, and continuous learning
• Provide coaching, performance management, and career development for direct reports

What You Bring

Experience

• 8+ years leading large, cross-functional technology teams in complex enterprise environments
• 5+ years driving innovation and transformation within security organizations
• Proven leadership in incident response, threat intelligence, and security operations

Technical Expertise

• Deep experience with:
• SIEM platforms and architecture
• SOAR and security automation
• Threat intelligence and threat hunting
• Digital forensics and incident investigations
• Network and security engineering principles
• Strong understanding of modern threat landscapes , including zero-days and adversary tactics

Leadership & Communication

• Ability to lead under pressure and make critical decisions during active incidents
• Exceptional communication skills—able to translate technical risks into business impact
• Experience influencing stakeholders at all levels, including executives
• Proven ability to drive change, build consensus, and execute strategic initiatives

Business & Operational Acumen

• Experience developing business cases, product roadmaps, and security strategies
• Strong understanding of security metrics, reporting, and governance
• Ability to balance technical depth with strategic vision

What Sets You Apart

• Experience monitoring and leveraging dark web intelligence
• Hands-on involvement in threat hunting and advanced detection techniques
• Strong track record of building and scaling modern SOC environments
• Passion for staying ahead of the threat landscape and continuously improving defenses

Why This Role Matters

This is a high-impact leadership role where you will shape how the organization detects, responds to, and prevents cyber threats . You will be a key voice in both technical execution and executive decision-making , ensuring security is not just reactive—but a strategic advantage.

#J-18808-Ljbffr