Originally posted 6 October 2026 by the employer.

About the role

This role involves leading security operations and incident response initiatives across the organization.

What you'll do

Lead day-to-day Cyber Defense & Response (CDR) functions, ensuring operational readiness and execution rigor.
Manage the incident response lifecycle from start to finish, acting as the point person for critical incidents.
Increase detection and response efficiency across on-premises and multi-cloud environments.
Define monitoring requirements, coverage goals, and compliance requirements aligned to the threat landscape.
Own operational performance and outcomes, including MTTD, MTTC, MTTR, detection coverage, and false-positive reduction.
Run CDR improvements following agile methods, managing a risk-prioritized backlog.
Drive transformation of manual SOC work by converting repetitive analyst tasks into automated, event-based AI pipelines.
Partner with Security Engineering to operationalize tooling, automation, playbooks, and post-incident improvements.

Bachelor's degree in Computer Science or related field, or equivalent experience.
10+ overall years of experience in cybersecurity, including 4+ years managing people within a SOC or incident response function.
Strong technical depth in SOC-relevant domains: digital forensics & incident response, threat hunting, cloud security, detection engineering, log analysis, malware analysis, or security automation.
Strong knowledge of cloud security (AWS, Azure, GCP and other CSPs), identity and access management, endpoint protection, and securing containerized or GPU-based AI/ML workloads.
Demonstrated experience owning operational metrics and driving measurable improvements.
Experience building or improving incident response processes, playbooks, and critical issue workflows.
Proven ability to lead global, 24x7 teams across distributed shift structures using agile practices.
Ability to convey complex security concepts clearly to engineers, executives, and legal and compliance partners.