Cyber Defense Operations Lead

As the Cyber Defense Operations Lead, you will lead, mature, and transform the Cyber Defense Operations (CDO) function. Drive CDO strategy execution, security monitoring, incident response coordination, detection engineering, SecOps platform operations, MSSP oversight, operational reporting, leadership development, and the innovation roadmap for security monitoring and incident response.

Key Responsibilities:

• Lead the CDO function and establish clear roles, responsibilities, decision rights, escalation paths, service expectations, and operating rhythms.
• Oversee monitoring, incident response coordination, detection engineering, SecOps platform operations, and MSSP performance.
• Owns the CDO 2-year roadmap from current-state operations to a data-driven, automation-enabled, agentic-ready capabilities.
• Represent CDO requirements in SecOps roadmap decisions, including telemetry quality, case management, reporting, cost management, automation, AI enablement, and future agentic workflows.
• Partner with IT, cloud, identity, endpoint, legal, privacy, corporate security, enterprise risk, Attack Surface Management, Cyber Threat Intelligence, Digital Investigations, data, and architecture teams.
• Build, support and manage the team while building a calm, professional, accountable, documented, and innovation-ready culture.

Your Skills and Expertise:

• Bachelor’s degree in Cybersecurity, Computer Science, or technology field (completed and verified prior to start)
• Fifteen (15) years of experience in cyber security in a private, public, government or military environment

Additional qualifications that could help you succeed even further in this role include:

• Proven management experience in Security Operations, Cyber Defense, Detection Engineering, Incident Response, Architecture or related cyber operations functions.
• Strong understanding of SIEM platforms, SOAR, alert management, detection lifecycle management, case management, and incident response workflows.
• Experience with cloud security telemetry across AWS, GCP, and/or Azure.
• Ability to define and improve cyber data quality, ingestion priorities, normalization, routing, retention, and cost management.
• Experience managing MSSPs, security vendors, and cross-functional delivery partners.
• Strong written and verbal executive communication skills.
• Practical understanding of automation, AI-enabled security operations, and the foundational data and workflow requirements needed to support future agentic SOC capabilities