Director, Security Operations (Security Engineering)
Core
Lead the CSIRT and SOC teams to set direction for detecting, investigating, and responding to threats across all entities and platforms, moving from baseline monitoring to an intelligence-driven, proactive defense.
Role type
Director, Security Operations (Security Engineering)
Builds
Global security operations capabilities, threat detection, and incident response for millions of daily customers.
Domain
Cyber defense, cloud governance, risk mitigation, and global platform security.
Required skills
Security Operations Center (SOC) leadership, Incident Response (CSIRT) management, Google SecOps (SIEM), telemetry ingestion, detection-as-code, automated response playbooks (SOAR), crisis management, global team scaling, security metrics (MTTD, MTTR, MITRE ATT&CK).
Preferred skills
Multi-cloud environment experience (AWS, GCP), food or logistics delivery networks, CISSP, CISM, GIAC credentials (GCIH, GCFA, GNFA).
Technologies
Google SecOps, SIEM, SOAR, AWS, GCP, MITRE ATT&CK.
Responsibilities
Lead CSIRT and SOC managers to set expectations and build diverse teams; Set strategy for security operations and run OKR/roadmap processes; Modernize detection and response with advanced telemetry; Coach teams on incident handling and act as incident commander for critical incidents; Partner with local CISOs to set consistent monitoring standards; Use data to diagnose issues and show measurable risk reduction.
Seniority
Director, strategic leadership with hands-on incident command.
