Senior Director of Cyber Defense

Entrata

. Define and execute Entrata’s cyber defense strategy and multi-year operational roadmap aligned with enterprise risk .

Posted 10/7/2026full-timeLehi • Utah • United StatesSenior💰 $221,100 - $367,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expert-level incident command and response capabilities in high-stakes cybersecurity environments, with a strong focus on building and maturing security operations centers and incident response programs. Proficient in leveraging advanced technologies and frameworks to enhance threat detection, compliance, and operational resilience.

Highest-signal resume keywords

Cybersecurity LeadershipIncident Response ManagementExecutive CommunicationSecurity Automation ImplementationRegulatory Compliance Expertise

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cyber Defense StrategyIncident CommandThreat DetectionSecurity Operations Center (SOC)Incident ResponseSecurity Automation (SOAR)Modern SIEM/XDR AnalyticsThreat IntelligenceProactive Threat HuntingInformation Security Principles

Soft Skills

Crisis ManagementWorkload PrioritizationDecision-Making Under PressureCustomer-Facing EngagementTransparent Communication

Tools & Technologies

AWSAzureGCPGenAI ToolsMITRE ATT&CKSOC 2 Type IIISO 27001NIST CSFFedRAMPGDPR

Certifications & Qualifications

CISSPCISMCISAGIAC (GCIH)GIAC (GCFA)

Industry Keywords

CybersecuritySecurity OperationsIncident ResponseCompliance FrameworksGovernance Controls

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Define and execute Entrata’s cyber defense strategy and multi-year operational roadmap aligned with enterprise risk
Serve as Incident Commander for significant security incidents, coordinating technical response, triage, containment, eradication, recovery, and business decisions
Lead detection, alerting, and investigation across the technology stack
Create and maintain incident response playbooks, runbooks, severity levels, decision rights, regional time-zone handoffs, and escalation paths
Serve as the frontline executive interface for enterprise clients during active incidents
Deliver transparent technical briefings, root-cause analyses, and post-incident remediation updates
Partner with Legal, Privacy, Communications, and Customer Success on crisis messaging
Establish and present strategic cyber metrics, threat assessments, and operational maturity benchmarks to executive leadership, audit committees, and board stakeholders
Drive continuous maturity across threat detection and response in alignment with compliance frameworks, regulatory standards, and third-party audit requirements
Leverage approved GenAI tools to automate routine tasks while auditing outputs and enforcing data governance and PII protection protocols
Partner with leaders across Security, Technology, Engineering, Infrastructure, Product, Compliance, Legal, and Communications to strengthen Entrata’s security posture and operational resilience
Establish processes, technology, communication channels, and cross-functional discipline for effective cyber-threat response across regions and time zones

Requirements

What you’ll need

10–15 years of progressive, relevant experience in cybersecurity, security operations (SOC), incident response, or cyber defense
Proven track record leading enterprise security operations, incident response, or cyber defense programs
Expert-level incident command and incident response skills in high-stakes environments
Demonstrated experience in direct, customer-facing executive engagement and client briefings during high-severity incidents
Demonstrated background building or maturing SOC/IR organizations within enterprise environments subject to rigorous audit, compliance, and governance controls
Deep, comprehensive understanding of information security principles, threat vectors, controls, technologies, and operating models
Exceptional executive-level communication, crisis management, workload prioritization, and decision-making capabilities under pressure
Active executive security credentials such as CISSP, CISM, CISA, or GIAC (GCIH, GCFA) preferred
Experience leading cyber defense and incident command within multi-tenant, cloud-native SaaS platforms (AWS, Azure, GCP) preferred
Hands-on leadership implementing security automation (SOAR), modern SIEM/XDR analytics, threat intelligence, and proactive threat hunting programs, such as MITRE ATT&CK, preferred
In-depth familiarity with SOC 2 Type II, ISO 27001, NIST CSF, FedRAMP, GDPR, and CCPA regulatory environments preferred
Master’s degree in Cybersecurity, Computer Science, Information Technology, or a related field preferred
Ability to leverage approved GenAI tools, audit AI outputs, craft context-rich prompts, and protect proprietary and personally identifiable information

Benefits

Comp & perks

Flexible and transparent culture with remote and hybrid work options
Generous vacation time
Frequent company recharge days
Comprehensive medical, dental, and vision coverage, including fertility benefits, for eligible employees and their families
HSA/FSA options
Employer-paid disability benefits for eligible employees
401(k) or similar retirement plans with employer matching for eligible employees
Wellness initiatives promoting physical and mental well-being
Access to an onsite gym at HQ
Gym memberships
Mental health resources
Wellness challenges
Employee assistance programs
Entrata Cares volunteerism, charity events, and community giving opportunities
Exclusive Previ cell phone plan
Discounts on services or local business partnerships
Bi-annual swag drops for employees