Senior Director, Global Cyber Detection and Response

Danaher Corporation

. Own Danaher's global Incident Detection & Response program, including strategy, roadmap, execution, and operational effectiveness .

Posted 9/22/2026full-timeRemote • Poland, IsraelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading global incident detection and response programs, with a focus on architecture, implementation, and operational effectiveness of security ecosystems. Proficient in managing cyber defense organizations and establishing incident response processes while ensuring compliance with legal and regulatory standards.

Highest-signal resume keywords

Incident Detection & Response ManagementSecurity Operations Center LeadershipDetection Engineering Lifecycle ExpertiseMITRE ATT&CK AlignmentSOAR & Security Automation Proficiency

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityDetection EngineeringSecurity OperationsData Pipeline ManagementTelemetry IngestionDetection DevelopmentIncident CommandExecutive CommunicationThreat IntelligenceAutomation

Soft Skills

LeadershipCollaborationCommunicationStrategic ThinkingProblem Solving

Tools & Technologies

SIEMEDR/XDRSOARAWSAzureGCPCriblKafkaStreaming ETLCyber Crisis Management

Certifications & Qualifications

CISSPCISMGCIAGCIHGCFAGNFA

Industry Keywords

Cyber DefenseIncident ResponseRegulatory ComplianceThreat HuntingData Quality Monitoring

Tech Stack

Tools & technologies

AWSAzureETLGoogle Cloud PlatformKafka

About the role

Key responsibilities & impact

Own Danaher's global Incident Detection & Response program, including strategy, roadmap, execution, and operational effectiveness
Lead architecture, implementation, and operation of the enterprise detection ecosystem, including SIEM, security data lake, UEBA, SOAR, EDR/XDR, and related platforms
Own the end-to-end telemetry and detection engineering lifecycle, including log onboarding, parsing, normalization, data quality monitoring, MITRE ATT&CK-aligned use cases, validation, tuning, coverage measurement, and retirement
Build, lead, and mature a global 24x7 cyber defense organization across multiple regions and management layers
Drive AI, agentic SOC workflows, automation, threat intelligence, threat hunting, alert triage, investigation, and response orchestration
Establish and govern enterprise incident response and cyber crisis management processes
Manage executive communications, legal and regulatory coordination, third-party incident response providers, tabletop exercises, and audit support
Define and communicate cyber defense performance metrics including MTTD, MTTR, ATT&CK coverage, telemetry health, analyst efficiency, false-positive reduction, backlog management, and program effectiveness
Partner with OpCo CISOs, CIOs, plant leaders, product teams, executive leadership, and audit/risk committees
Report to the Chief Information Security Officer within the Global Information Security organization

Requirements

What you’ll need

Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent professional experience)
12+ years of information security experience
Direct ownership of security operations, detection engineering, and/or incident response within a global organization
Experience standing up, migrating, or modernizing enterprise-scale SIEM environments
Experience with data pipelines, telemetry ingestion, parsing, normalization, and detection content ownership
Deep expertise across the full detection engineering lifecycle
MITRE ATT&CK-aligned detection development and correlation/analytic rule authoring
Experience with detection-as-code and CI/CD for detections
Proven leadership of a 24x7 Security Operations Center and incident response function
Experience with major incident command, executive communications, investigations, and coordination with legal, privacy, compliance, and regulatory stakeholders
Hands-on experience with SOAR, security automation, EDR/XDR, AWS, Azure, GCP, identity threat detection, Cribl, Kafka, and streaming ETL
Ability to lead large-scale information security organizations through multiple management layers
Experience directing globally distributed teams across multiple regions, sites, and business environments
Experience in complex, multi-country enterprises spanning 50+ countries
Ability to travel up to 20–30% of the time, including international travel
Professional certification such as CISSP, CISM, GCIA, GCIH, GCFA, or GNFA is a plus

Benefits

Comp & perks

Culture of continuous improvement
Career development and hiring-from-within opportunities
Culture of belonging
Remote work option
Global travel opportunities