Director, Cyber Defense Center

About the Role:

Shape the Front Lines of Cyber Defense: Cyber Defense Center Director.

Are you a dynamic and results-oriented leader passionate about building and empowering a high-performing cyber defense team?

As the Director, Cyber Defense Center (CDC), you will be at the heart of our security operations, leading the charge in monitoring, triaging, and responding to all malicious security events across our digital landscape. This critical role demands a proactive and strategic individual who can build and continuously improve our front-line defense, ensuring the integrity and security of our valuable assets. You will champion the initial stages of the incident response lifecycle, guide and develop a team of skilled analysts, and serve as a pivotal layer in protecting our organization from evolving cyber threats.

What You'll Do:

• Elevate Cyber Defense Operations: Direct, oversee, and continuously innovate the Cyber Defense Center, strategically integrating people, processes, and cutting-edge technology to significantly enhance our security monitoring, proactive threat detection, in-depth analysis, and rapid incident response capabilities.

• Architect and Refine Incident Response: Develop, implement, and continuously optimize a robust incident response program that ensures timely management and effective escalation of security incidents. You will be a key collaborator with various business units, facilitating seamless validation and thorough investigation.

• Integrate Actionable Threat Intelligence: Champion the seamless integration of diverse threat intelligence sources and alerting mechanisms to proactively identify potential risks. You will drive the development of proactive defense strategies to minimize the impact of emerging cyber threats.

• Champion Excellence in Monitoring and Response: Elevate the overall CDC program by strategically optimizing our monitoring, comprehensive logging, intelligent alerting, and swift incident response processes to consistently meet and exceed industry-leading cybersecurity standards.

• Inspire and Grow a World-Class Team: Provide strong, visionary leadership to build, mentor, and cultivate a high-performing CDC team. You will foster a culture of excellence, continuous learning, and proactive security vigilance.

• Drive Performance and Continuous Improvement: Establish critical key performance indicators (KPIs) and insightful operational metrics to effectively communicate the team's performance and proactively identify key areas for strategic improvement.

• Lead Front-Line Threat Analysis: Oversee the initial receipt and expert triage of security alerts, diligently monitoring relevant network traffic to identify and effectively respond to potential threats targeting our enterprise.

• Orchestrate Coordinated Incident Response: Skillfully prioritize inbound security alerts and collaborate effectively with peers and relevant stakeholders to orchestrate timely and efficient response activities, including informing asset owners of identified incidents.

• Expand Threat Detection Coverage: Proactively identify and implement strategic enhancements to our monitoring and triage capabilities, continuously expanding our coverage to significantly reduce the overall risk of compromise to the organization.

• Collaborate on Security Infrastructure: Partner closely with the Global Engineering and Architecture Team to ensure the optimal configuration and seamless engineering of the SIEM platform's backend, proactively identifying and raising critical areas for improvement and remediation.

• Empower Email Threat Defense: Lead and develop the email threat analysis team, enhancing their ability to expertly triage inbound emails, accurately prioritize potential risks, and execute coordinated and effective response strategies.

• Fortify Data Loss Prevention: Strategically manage and optimize our data loss prevention (DLP) tools to effectively flag and rigorously restrict the unauthorized outflow of sensitive data, preventing critical information from leaving the enterprise.

• Direct Data Loss Incident Response: Take decisive action to effectively monitor and respond swiftly and decisively in the event of a data loss incident, mitigating potential damage and ensuring appropriate remediation.

What We're Looking For:

​

• Experience: 8-10+ years relevant cybersecurity experience, including 3-5+ years managing/supervising teams and 5+ years in regulated industries (e.g., Healthcare, Finance, Defense). Prior experience in an IT services firm is a plus.

• T