Security Engineering & Operations Leadership 

• Provide technical and operational leadership across security operations and security engineering functions, ensuring consistent execution of cybersecurity practices and tooling. 

• Lead day-to-day security operations, including monitoring, alert triage, incident response, and escalation, ensuring adherence to defined runbooks and response standards. 

• Oversee the engineering, operation, and reliability of core security platforms (e.g., SIEM, EDR, SOAR, Vulnerability Management, Automated Penetration Testing, Firewall, Cloud, SASE, and Identity Security tools). 

• Build and maintain strong collaborative relationships with infrastructure, application, cloud, and DevOps teams to embed security into operational workflows. 

• Establish and maintain operational discipline, including shift coverage, on-call readiness, handoff quality, and incident communications. 

Incident Response, Detection & Continuous Improvement  

• Partner with internal teams and external providers (MSSPs, vendors) to identify, investigate, contain, and remediate security incidents. 

• Ensure security incidents are fully documented, lessons learned are captured, and corrective actions are tracked to closure. 

• Drive continuous improvement of detection, response, and automation capabilities by analyzing incident trends, false positives, and operational gaps. 

• Oversee vulnerability identification and coordination of remediation efforts in partnership with infrastructure and application teams. 

• Conduct periodic Red & Blue teaming and Incident Response Tabletop exercises. 

• Ensure security tooling and processes evolve to address emerging threats and changing business risk. 

Team Development, Enablement & Documentation 

• Provide coaching, mentoring, and technical guidance to security operations and engineering team members. 

• Support training and skill development related to security tools, processes, incident response, and emerging threats. 

• Ensure comprehensive documentation of security processes, procedures, incidents, and operational standards. 

• Promote knowledge sharing, operational consistency, and a culture of accountability within the security team. 

Education:  Bachelor degree in Computer Science or a related technical field. 

Licenses/Certification/Registration: Expert level cybersecurity certification such as CISSP, CCSP, CASP, OSCP, etc. 

Experience:  

• Minimum of ten years’ experience in technical cybersecurity, at least 3 years’ experience with forensic tools, investigations, and incident response, and at least five years’ experience in working in a LAN / WAN / SD-WAN environments. 

#LI-KG2