Director, Security Operations Enablement
$125,000 per year
Apply (opens in a new tab)Director, Security Operations Enablement
Posted yesterday
SENIORITY
Manager
SALARY
$125,000 per year
About the role
- To Succeed
- Own and lead the Security Operations Enablement function, covering Data Engineering, Data Analytics, and SIEM/SOAR engineering
- Define and deliver the strategic roadmap for Security Operations platforms and capabilities, ensuring alignment with organizational cyber defense priorities
- Manage and develop a global team of 20+ engineering resources, fostering a high-performance and engineering-led culture
- Govern the lifecycle of Security Operations technologies, including platform selection, implementation, optimization, and decommissioning
- Ensure the availability, performance, and continuous improvement of data pipelines, detection engineering, and automation capabilities
- Partner with GCDC and Incident Response leadership to understand operational requirements and translate them into technical solutions
- Collaborate with Security Engineering and Enterprise Architecture to define and implement target state architectures
- Drive the adoption of modern engineering practices, including infrastructure as code, CI/CD, and scalable automation frameworks
- Establish and maintain vendor relationships, influencing product direction and ensuring value realization from strategic partners
- Define and track performance metrics for Security Operations technologies, leveraging data-driven insights to improve outcomes
- Lead governance, risk, and compliance activities related to enablement platforms, ensuring alignment with enterprise standards
- Act as a key contributor to tactical and strategic decision-making within the Information Security Office
- Support innovation initiatives, including the adoption of advanced analytics, AI, and automation capabilities within Security Operations
- 10+ years of experience in Cyber Security Engineering, Security Operations, or a related field
- Demonstrable experience leading engineering teams delivering large-scale security platforms (e.g. SIEM, SOAR, data platforms)
- Strong understanding of Security Operations processes, including detection, triage, and response workflows
- Proven ability to define and execute technology strategy in complex, global organizations
- Experience managing and developing high-performing engineering teams in a distributed environment
- Excellent stakeholder management and communication skills, with the ability to engage both technical and non-technical audiences
- Strong analytical and problem-solving capabilities, with a data-driven approach to decision making
- Experience working with security vendors and managing strategic partnerships
- Ability to operate effectively at both tactical and strategic levels, balancing immediate operational needs with long-term vision
- Familiarity with cloud platforms, modern data architectures, and scalable engineering patterns
- PreferredExperience in Security Architecture or close collaboration with architecture functions
- Knowledge of enterprise integration patterns and large-scale data engineering frameworks
- Experience delivering or supporting AI/automation initiatives within Security Operations
- Financial services or highly regulated industry experience
- Key relationships
- Head of Security Operations
- Deputy CISO and CISODirector of Incident Response
- Technical Director of the Global Cyber-risk Defense Center (GCDC)
- Security Engineering
- Enterprise Security Architecture
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
