Note: The job is a remote job and is open to candidates in USA. Everforth ECS solves complex cybersecurity and technology challenges for commercial, government, defense, and intelligence customers. The company is seeking a Director of Security Operations to lead managed cybersecurity services, including security monitoring, threat detection, investigation, incident response, team leadership, customer engagement, and continuous operational improvement.
Responsibilities
- Lead, develop, and mentor a high-performing team of SOC analysts, detection engineers, red team operators, cyber threat intelligence anlaysts, and exposure management analysts
- Define the security operations strategy, operating standards, service model, and capability roadmap
- Oversee day-to-day monitoring, alert triage, investigation, escalation, and response activities across customer and enterprise environments
- Serve as the senior operational leader during major security incidents, coordinating investigation, containment, recovery, and executive and customer communications
- Lead the detection engineering program, including detection development, validation, tuning, coverage assessment, and lifecycle management
- Integrate cyber threat intelligence and threat hunting into SOC operations to improve detection, investigative context, and proactive defense
- Establish clear standards for alert analysis, case documentation, escalation quality, quality assurance, and operational reporting
- Identify and implement practical applications of AI across security operations to accelerate triage and investigation, improve analytical quality, automate repeatable workflows, and enhance service scalability while maintaining appropriate human oversight
- Develop and maintain operating procedures, investigation playbooks, escalation criteria, and incident response processes
- Work directly with customers and enterprise stakeholders to understand priorities, communicate risk, explain operational decisions, and resolve service concerns
- Partner with Security Engineering and IT teams to ensure security platforms, telemetry, integrations, and automation reliably support SOC requirements
- Manage operational priorities, staffing, hiring, performance, professional development, on-call coverage, and service delivery risk
- Support solution development, operational proposals, service transitions, and strategic customer engagements
Company Overview
Company H1B Sponsorship