
Director / Head of Incident Response & Security Operations
Overview
We are seeking a seasoned cybersecurity leader to own and evolve our Incident Response and Security Operations capabilities. This individual will operate at the intersection of deep technical expertise and executive communication—guiding teams through high-pressure security incidents while translating complex threats into clear, actionable insights for business leadership.
You will play a critical role in strengthening our organization’s ability to detect, respond to, and proactively mitigate threats, while building a resilient, forward-thinking security operations program.
What You’ll Do Lead the development and execution of both proactive and reactive security operations strategies Partner with executive leadership (including CISO and business stakeholders) to define and communicate security program metrics, risk posture, and progress Drive alignment between engineering, security, and business teams during incidents and strategic initiatives Build and scale a high-performing security operations and incident response team Act as the senior incident commander during high-impact security events Guide teams through real-time incident response , ensuring effective containment, remediation, and recovery Oversee investigations involving: Insider threats Advanced persistent threats (APT) Stay ahead of emerging threats by monitoring dark web activity, threat intelligence feeds, and global security trends Threat Detection & Engineering Collaboration Drive advancements in threat detection, hunting, and response capabilities Oversee and optimize: Logging and telemetry pipelines Ensure comprehensive visibility across systems, tools, and data sources Partner with engineering to translate incidents into actionable remediation plans Operational Excellence Establish and track KPIs, SLAs, and operational metrics for security operations Implement continuous improvement frameworks for detection, response, and recovery Lead efforts to automate workflows and improve operational efficiency Ensure processes are scalable, resilient, and adaptable to evolving threats Team Development Recruit, mentor, and retain top cybersecurity talent Foster a culture of accountability, innovation, and continuous learning Provide coaching, performance management, and career development for direct reports What You Bring Experience 8+ years leading large, cross-functional technology teams in complex enterprise environments 5+ years driving innovation and transformation within security organizations Proven leadership in incident response, threat intelligence, and security operations Technical Expertise Deep experience with: SIEM platforms and architecture SOAR and security automation Threat intelligence and threat hunting Digital forensics and incident investigations Network and security engineering principles Strong understanding of modern threat landscapes , including zero-days and adversary tactics Leadership & Communication Ability to lead under pressure and make critical decisions during active incidents Exceptional communication skills—able to translate technical risks into business impact Experience influencing stakeholders at all levels, including executives Proven ability to drive change, build consensus, and execute strategic initiatives Business & Operational Acumen Experience developing business cases, product roadmaps, and security strategies Strong understanding of security metrics, reporting, and governance Ability to balance technical depth with strategic vision What Sets You Apart Experience monitoring and leveraging dark web intelligence Hands-on involvement in threat hunting and advanced detection techniques Strong track record of building and scaling modern SOC environments Passion for staying ahead of the threat landscape and continuously improving defenses Why This Role Matters
This is a high-impact leadership role where you will shape how the organization detects, responds to, and prevents cyber threats . You will be a key voice in both technical execution and executive decision-making , ensuring security is not just reactive—but a strategic advantage.
#J-18808-Ljbffr
Similar jobs
KPMG USDirector, Cybersecurity Integration and Transformation
The E.W. Scripps CompanyLead Cybersecurity Architect (Remote)
Palo Alto NetworksCybersecurity Solutions Consulting Manager | Remote Leadership
KPMGCybersecurity Innovation Engineering Manager
Senior Cybersecurity Lead – TMT & AI-Driven Solutions
United Airlines