Director, Security Operations & Detection Engineering

Required

• 15+ years of progressive cybersecurity experience, including 6+ years leading, managing, and scaling detection engineering and security operations teams.
• Current hands-on experience with detection engineering, threat hunting, or incident response sufficient to credibly guide technical strategy and support your team.
• Strong working knowledge of SIEM, EDR, NDR/SOAR, and modern detection and response tooling. Strong understanding of cloud-native environments (AWS, Kubernetes) and enterprise/endpoint security (Linux, macOS, Windows).
• Deep knowledge of the MITRE ATT&CK framework, NIST CSF, and modern adversarial techniques.
• End-to-end incident management experience, driving cross-departmental collaboration through high-severity incidents.
• Experience with vulnerability management, including triage/prioritization of findings and driving remediation across engineering teams.
• Demonstrated experience building a metrics/reporting program from scratch (defining metrics, implementing measurement, and coaching a team to deliver insight rather than raw data) for a technical function.
• Working proficiency in Python and/or C++.
• Experience building and maintaining security data lakes and big data tooling (e.g., AWS Athena, Snowflake, SQL/data warehousing).
• Experience designing and implementing Zero Trust Architecture.
• Experience with low-level data collection frameworks (e.g., auditd, sysmon, eBPF).
• Familiarity with systems architecture, distributed systems, and microservices, and with performance monitoring/capacity planning for network operations.