Cyber Defense Unit Manager

Acronis

. Lead the Cyber Defense function, including strategy, roadmap, operating model, and continuous maturity improvement .

Posted 11/5/2026full-timeRemote • United StatesSeniorLead💰 $170,000 - $260,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in leading cybersecurity operations, incident response, and threat detection within global technology environments. Proficient in managing teams, budgets, and vendor relationships while ensuring effective security monitoring and incident management.

Highest-signal resume keywords

Cybersecurity LeadershipIncident Response ManagementThreat Detection EngineeringSIEM/EDR/XDR OptimizationCloud Security Expertise

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cyber Defense StrategyThreat HuntingDigital ForensicsAutomation ScriptingIncident Response PlanningDetection EngineeringBudget ManagementRegulatory ComplianceMITRE ATT&CK FrameworkCloud Security (AWS/Azure)

Soft Skills

Analytical SkillsDecision-MakingCommunication SkillsLeadershipIntegrity

Tools & Technologies

SIEMEDRXDRSOARThreat Intelligence PlatformsAcronis ProductsAutomation ToolsSecurity Monitoring Technologies

Certifications & Qualifications

CISSPCISMGIAC (GCIH, GCFA, GCTI, GCDA)OSCP

Industry Keywords

CybersecurityIncident ResponseThreat DetectionManaged Security Service ProvidersVulnerability Management

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityPython

About the role

Key responsibilities & impact

Lead the Cyber Defense function, including strategy, roadmap, operating model, and continuous maturity improvement
Manage, mentor, and develop a global team of analysts, responders, threat hunters, and detection engineers
Ensure security coverage across time zones, including follow-the-sun or on-call models
Define the build-versus-buy approach and manage MDR/MSSP and other external partners
Manage the Cyber Defense budget
Oversee 24x7 security monitoring, alert triage, investigation, and escalation across endpoints, networks, identities, applications, and cloud environments
Establish and maintain SOC processes, runbooks, severity definitions, and handoffs
Lead proactive threat hunting and attack surface monitoring
Own the detection engineering lifecycle, including use case development, testing, tuning, deployment, and retirement
Map detection coverage to MITRE ATT&CK and prioritize improvements
Define log source requirements and onboarding priorities with IT, Cloud, and Engineering
Run purple team and adversary emulation exercises
Lead response to significant cybersecurity incidents across Security, IT, Engineering, Legal, Communications, and executive leadership
Maintain and test incident response plans, playbooks, and crisis communication procedures
Oversee digital forensics, evidence handling, containment, eradication, and recovery
Support breach assessment and regulatory notification decisions
Run post-incident reviews and drive corrective actions to closure
Build and manage threat intelligence capabilities
Translate intelligence into detections, hunts, blocking actions, and risk-informed recommendations
Participate in industry intelligence-sharing communities and partnerships
Own and optimize SIEM, EDR/XDR, SOAR, and threat intelligence platforms
Drive automation and AI-assisted capabilities for detection, enrichment, triage, investigation, and response
Leverage Acronis products and platform capabilities to strengthen internal defense
Establish KPIs and reporting for cyber defense effectiveness
Report cyber defense posture, major incidents, and risk trends to senior leadership, the Board, and Audit Committee when needed
Partner with Security, IT, Cloud, Engineering, Product Security, and Legal
Coordinate with Vulnerability Management and Product Security on exploitable risks, emergency patching, and threat-informed prioritization
Support audits, customer assurance requests, and regulatory requirements

Requirements

What you’ll need

Significant cybersecurity experience (typically 10+ years) in security operations, incident response, threat detection, or cyber defense, including 5+ years leading teams
Proven experience leading cybersecurity teams within a global technology or software environment, including distributed, multi-time-zone teams
Demonstrated experience leading major incident response efforts from detection through recovery and post-incident review
Strong understanding of modern attacker techniques, threat actor tradecraft, and frameworks such as MITRE ATT&CK
Hands-on knowledge of SIEM, EDR/XDR, SOAR, threat intelligence, and security monitoring technologies, including evaluation and optimization
Experience with threat hunting and detection engineering, including detection-as-code practices
Strong understanding of AWS, Azure, or other modern cloud environments, including cloud-native logging, detection, and response
Experience with digital forensics and investigations, and working knowledge of breach notification and regulatory requirements
Experience leveraging automation, scripting (e.g., Python), and ideally AI within security operations
Experience managing budgets, vendors, and managed security service providers
Strong leadership, analytical, and decision-making skills, particularly during high-pressure incidents
Ability to communicate complex cybersecurity risks clearly to technical and executive stakeholders, including legal and board audiences
High integrity and sound judgment when handling sensitive, confidential, and privileged information
Relevant certifications such as CISSP, CISM, GIAC (GCIH, GCFA, GCTI, GCDA), or OSCP are a plus
Full criminal, education and identification background check required for all new hires

Benefits

Comp & perks

Medical coverage
Dental coverage
Vision coverage
Flexible spending accounts (FSA)
Disability insurance
Life insurance
401(k) retirement plan with company match
Generous vacation policy