Director, Threat Detection – Response

North

. Serve as senior incident commander and ultimate escalation point during major, high-severity security incidents .

Posted 10/16/2026full-timeRemote • United StatesLead💰 $175,000 - $235,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in incident response, detection engineering, and threat hunting, with a strong focus on managing complex security incidents across cloud, identity, network, and endpoint environments. Proven ability to lead high-performing technical teams and translate technical findings into actionable insights for executive leadership.

Highest-signal resume keywords

Incident Response ManagementDetection EngineeringThreat HuntingLog ManagementCyber Threat Intelligence

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseDigital ForensicsRoot Cause AnalysisDetection Logic DevelopmentThreat Hunting ProgramsLog Analysis TechniquesData Pipeline StrategyAI Threat CountermeasuresCloud SecurityNetwork Security

Soft Skills

LeadershipCommunicationMentoringCollaborationProblem-Solving

Tools & Technologies

AWSAzureGCPWindowsLinuxIncident Response ToolsLog Collection ArchitecturesTelemetry SystemsAI AgentsModern Identity Platforms

Certifications & Qualifications

GCFAGCIHGNFAGCTIOSCPOSIRCompTIA CySA+

Industry Keywords

Cyber SecurityPayments IndustryFintechPCI-DSSIncident Command

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformLinux

About the role

Key responsibilities & impact

Serve as senior incident commander and ultimate escalation point during major, high-severity security incidents
Direct incident response strategy across endpoint, network, cloud, identity, and application layers
Oversee digital forensics and root cause analysis, driving remediation of systemic gaps and mitigating fraud or financial loss
Direct detection engineering strategy and ensure development, tuning, and validation of high-fidelity detection logic
Lead hypothesis-driven threat hunting programs based on incident trends and the MITRE ATT&CK framework
Build and integrate Cyber Threat Intelligence capabilities to identify and counter emerging adversary TTPs relevant to the payments industry
Drive enterprise logging and data pipeline strategy across cloud and on-premises environments
Manage, mentor, and develop senior incident responders, detection engineers, and threat hunters
Translate technical findings and incident outcomes into actionable narratives for executive leadership and the board of directors

Requirements

What you’ll need

Bachelor's degree in Computer Science, Cyber Security or related field, or combination of education and experience
10+ years of hands-on information security experience
Deep subject-matter expertise in incident response, detection engineering, and threat hunting
Hands-on expertise managing complex security incidents, advanced threat hunting, and detection engineering across cloud, identity, network, and endpoint environments
Demonstrated track record in a leadership role overseeing complex security operations and high-performing technical teams
Proficiency with advanced Incident Response tools, digital forensic protocols, log analysis techniques, and managing detection rules in modern platforms
Strong expertise in log management and telemetry, including designing and overseeing log collection architectures and data pipelines across cloud and on-premises environments
Experience investigating attacks on AI agents, countering AI-facilitated threats, and integrating AI agents into incident response workflows
Architectural understanding of internal AI and agentic infrastructure, including secure deployment, monitoring, and incident readiness of in-house models and autonomous agent networks
Solid understanding of AWS, Azure, GCP, Windows/Linux systems, and modern identity platforms
Familiarity with the payments/fintech regulatory environment, including working knowledge of PCI-DSS
Excellent communication skills, with ability to brief executive leadership, legal, and compliance teams during high-pressure situations
Preferred certifications: GCFA, GCIH, GNFA, GCTI, OSCP, OSIR, CompTIA CySA+
Must be eligible to work in the United States; role is not eligible for current or future sponsorship

Benefits

Comp & perks

Medical, Dental, & Vision Coverage
Flexible Paid Time Off
401(k) + Match
Mental Health Support & Well-Being Program
Paid Maternity & Paternity Leave
Education Assistance
Company-funded Lifestyle Spending Account