Director Security Operations

Are you looking to advance your career and flex your leadership and security skills in a fast-paced and rewarding organization? Join us! As the Director of Security, you will provide strategic leadership and oversight for the organization's comprehensive security program, which includes information security, industrial security, special programs management, crisis management, and investigations. You will ensure the effective implementation of security policies, standards, and procedures across domestic and international operations. This role involves partnering with various business units to enhance and align security solutions with organizational goals while identifying and planning for emerging security threats.

As SNC's corporate team, we provide the company and its business areas with strategic direction and business support spanning executive management, finance and accounting, operations, human resources, legal, IT, information security, facilities, marketing, and communications.

• •Oversee 24x7x365 multi-tier SOC operations, establishing operational cadence, shift handovers, escalation paths, and service level agreements (SLAs/SLOs).
• •Direct response strategies for critical incidents, serving as the senior escalation point and incident commander during active threats, breaches, and outages.
• •Establish standard operating procedures (SOPs), playbooks, and runbooks aligned with industry frameworks (MITRE Adversarial Tactics, Techniques, and Common Knowledge [ATT&CK], MITRE Adversarial Threat Landscape for Artificial-Intelligence Systems [ATLAS], National Institute of Standards and Technology Cybersecurity Framework [NIST CSF], ISO 27001).
• •Maintain high analyst performance and operational rigor while mitigating alert fatigue and burnout.
• •Advance proactive threat hunting and active defense initiatives.
• •Manage SOC Financial Planning & Analysis (FP&A) and reporting.

• •Lead the security engineering team charged with building, deploying, and maintaining cloud-native detection, response, and monitoring pipelines (AWS/Azure/GCP).
• •Champion the adoption of modern technologies, including machine learning models, predictive threat analytics, and autonomous AI agents to drive automated triage, alert enrichment, and remediation.
• •Oversee SIEM, SOAR, EDR/XDR, and cloud-native security platforms, continuously refining detection engineering, rule tuning, and pipeline efficiency.

• •Act as the senior operational liaison for key client stakeholders, enterprise leadership, and regulatory bodies.
• •Lead high-stakes client briefings during major security incidents, presenting root-cause analyses, containment actions, and remediation paths with composure.
• •Partner with Product, Customer Success, and Sales engineering teams to align SOC capabilities with client expectations and evolving service offerings.

• •Oversee the production of actionable cyber threat intelligence (CTI) and operational reporting.
• •Author and review detailed cyber activity reports, executive dashboards, and threat advisories for both technical teams and C-suite/external customer leadership.
• •Translate complex telemetry, adversarial tactics, and forensic finding.

• •Preferred Certifications & Education
• •Education: Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent practical experience.
• •Certifications: CISSP, CISM, or CCISO; advanced technical certifications such as GIAC (GCIH, GCFA, GNFA, GCDA) are highly desirable.
• •Technical Competencies
• •Deep understanding of threat actor tactics, techniques, and procedures (TTPs), malware analysis lifecycles, and forensic methodologies.
• •Practical exposure to LLMs, generative AI tools, or agentic frameworks deployed in security workflows (e.g., automated alert triage, natural-language threat hunting).
• •Mastery of modern detection and telemetry stacks (e.g., Splunk, Microsoft Sentinel, CrowdStrike Falcon, Palo Alto Cortex XSOAR, Datadog).