Director of Cyber Security Operations

U.S. Financial Technology

. Lead enterprise-scale monitoring operations, including 24×7 SOC oversight, real-time detection and alerting, telemetry optimization, and automation .

Posted 9/28/2026full-timeRemote • United StatesLead💰 $208,500 - $235,750 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading enterprise-scale cybersecurity operations, including SOC management, incident response, and cloud-native security across AWS, Azure, and GCP. Proficient in architecting and operationalizing SIEM and SOAR platforms, with a strong focus on automation, compliance, and risk governance.

Highest-signal resume keywords

SIEM/SOAR ArchitectureIncident Response LeadershipCloud Security OperationsVulnerability ManagementCybersecurity Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SIEMSOARAI/ML AnalyticsDigital ForensicsVulnerability ManagementSecure Configuration BaselinesPatch GovernanceIdentity GovernanceTelemetry OptimizationThreat Detection

Soft Skills

LeadershipTeam-BuildingCommunicationExecutive PresentationCross-Functional Program Leadership

Tools & Technologies

SplunkPower AutomateKQLDLPThreat Intelligence ProgramsAutomation FrameworksCloud Infrastructure

Certifications & Qualifications

CISSPCISACISMGSOMGSOC

Industry Keywords

Security Operations CenterNIST CSFISO 27001SOC 2FHFA/Fed Examination

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformSplunk

About the role

Key responsibilities & impact

Lead enterprise-scale monitoring operations, including 24×7 SOC oversight, real-time detection and alerting, telemetry optimization, and automation
Direct incident response and digital forensics programs, coordinating containment, eradication, and recovery
Manage executive and regulatory communications during major security events
Support vulnerability management, secure configuration baselines, patch governance, system integrity, authorized change, and compliance alignment
Architect and operationalize SIEM, SOAR, and AI/ML-driven security platforms and analytics
Oversee cloud-native and hybrid security operations across AWS, Azure, and GCP
Embed DevSecOps practices, workload segmentation, and identity governance across cloud environments
Define and report cyber-risk posture to executive leadership and regulatory bodies
Drive cybersecurity process automation, technology modernization, predictive detection, and orchestration
Build, mentor, and lead cybersecurity teams across monitoring, response, engineering, and cloud disciplines
Integrate cybersecurity operations with infrastructure and IT processes and unified incident management workflows
Represent the organization in audits, examinations, and crisis events

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field required
Industry certification required, such as GSOM, GSOC, CISSP, CISA, CISM, or equivalent designation
Minimum of 10 years of experience leading enterprise-scale monitoring operations, including 24×7 SOC management, detection and alerting, telemetry and log pipeline optimization, and automated response processes
Minimum of 10 years of experience directing incident response and forensics functions, including major incident handling, digital evidence collection, post-mortem analysis, executive and regulator engagement, and threat containment and eradication
Minimum of 10 years of experience architecting and operationalizing security platforms and tooling, including SIEM/SOAR, AI/ML analytics, enterprise security solutions, and technical roadmaps
Minimum of 6–10 years of experience managing enterprise-level risk-reduction programs, vulnerability management, compliance alignment, secure configuration baselining, patch governance, and audit remediation
Minimum of 6–10 years of experience overseeing cloud-native cybersecurity operations across AWS, Azure, and GCP, including DevSecOps, hybrid infrastructure compliance, identity, access, and workload isolation
Applicants must be authorized to work in the US without requiring employer sponsorship currently or in the future
Deep expertise in Security Operations Center design and management
Advanced proficiency in incident response leadership and digital forensics
Proven ability to architect and maintain SIEM and SOAR platforms, including Splunk, Power Automate, scripting, and KQL
Strong knowledge of AI/ML integration in cybersecurity, behavior-based analytics, anomaly detection, and large language model applications
Expertise in vulnerability management, threat-based prioritization, patch lifecycle governance, secure configuration baselines, and threat detection
Advanced understanding of secure cloud architecture and DevSecOps across AWS, Azure, and GCP
Proficiency in digital forensics and evidence preservation, including memory, disk, and network artifact analysis
Capability to lead cybersecurity risk governance aligned with NIST CSF, ISO 27001, SOC 2, and FHFA/Fed examination requirements
Strong command of cybersecurity automation and orchestration frameworks
Strong knowledge of identity and access management, least-privilege enforcement, and privileged-access controls
Experience implementing and tuning DLP, insider risk, and threat intelligence programs
Fluency in security metrics and KPI development
Skills in cross-functional program leadership
Expertise in vendor and third-party risk management
Ability to design and execute cybersecurity testing and validation programs, including tabletop exercises and red team coordination
Strong communication and executive presentation skills
Track record of innovation and continuous improvement using automation, ML/AI, and analytics
Exceptional leadership and team-building ability

Benefits

Comp & perks

Performance bonus
401(k) match
Healthcare coverage
Paid time off (PTO)
Competitive total compensation package
Background investigation and possible credit check as a condition of employment