New Grad AI/ML Companies UniversitiesFor Universities Sign in Sign upGet started free

Director of Security Operations & Detection Engineering, RFA at Titan Msp · LumiJobs

Back to jobs

Overview Company

Apply on Employer SiteApply Now

Titan Msp· Posted Nov 15, 2026

Director of Security Operations & Detection Engineering, RFA

Remote (US)full time

Remote

senior

H1B: no

Titan Msp Director of Security Operations & Detection Engineering leads RFA's detection and response capabilities, including SIEM, EDR, and identity telemetry. This role involves designing the security operations stack, building onboarding playbooks, and leading the SOC team.

Responsibilities

As Director of Security Operations & Detection Engineering, you own RFA's detection and response capability end to end. That covers the SIEM, EDR and identity telemetry, the detections and playbooks, how every new client gets onboarded, and the analysts who run it 24/7. You'll report to RFA's CISO. You'll also work closely with Titan's engineering team, who build the agents and automation from your requirements.
You'll measure success by time to detect and contain, detection coverage across client environments, false-positive and escalation rates, and incidents caught before they become client problems.
This role is remote (US).
Own the architecture of RFA's security operations stack, including SIEM, EDR, identity and email security, and decide what we build, buy, consolidate or retire
Build a repeatable onboarding playbook that brings each new client, and each acquired MSP, onto standard log sources, integrations and baseline detections
Write and tune detections for the threats financial firms actually face: impossible travel, MFA fatigue, token replay, malicious mailbox rules, business email compromise
Design triage and response automation with Titan's engineers, turning your playbooks into AI agent workflows with the right guardrails
Lead, hire and develop RFA's SOC team. Set the bar, coach analysts, and hire people better than you
Run serious incidents hands-on, from first alert through containment, evidence preservation and the client debrief
Find and close coverage gaps across RFA's own environment and our clients'
Report SOC performance clearly to the CISO and to client leadership in business reviews
You might thrive in this role if you