Director of Security Operations

Overview
The Director of Security Operations leads the team responsible for detection and response across the enterprise. This role owns incident response, endpoint detection and response, email security, and SIEM and detection engineering, along with the monitoring and automation that support them. The director sets the strategy, staffing model, budget, and operating metrics for the function, and remains a working leader who takes incident commander duty, builds detections, and reviews analyst work alongside the team.
Responsibilities

Own the detection and response strategy and multi year roadmap, and align it to enterprise risk, the threat landscape, and business priorities

Lead, coach, and develop the security operations team, including hiring, scheduling, on call rotation, performance management, succession planning, and career development

Operate as a player coach, taking incident commander duty, writing detections, and performing hands on analysis alongside the team

Own the incident response program end to end, including the IR plan, severity model, escalation paths, tabletop exercises, evidence handling, and post incident review

Own endpoint detection and response strategy and operations, including policy tuning, coverage assurance, containment workflows, and threat hunting

Own email security, including phishing defense, mail authentication controls (SPF, DKIM, DMARC), user reporting workflows, and response to business email compromise attempts

Own SIEM and detection engineering, including log source onboarding, detection development and testing, alert quality, and false positive reduction

Build and maintain automation and runbooks that shorten response time and remove repetitive analyst work

Develop threat informed detection coverage mapped to MITRE ATT&CK and validate it through purple team and control testing

Define and report operational metrics including mean time to detect, mean time to respond, alert volume and quality, coverage, and containment effectiveness

Coordinate with IT, engineering, legal, privacy, and communications during incidents, including support for regulatory and customer notification decisions

Own budget, staffing plan, and vendor strategy for the detection and response stack, including managed service providers, tooling selection, and licensing

Present program status, incident outcomes, and risk decisions to executive leadership, and support board, audit committee, and regulator reporting as requested

Support audit and compliance requirements with evidence for monitoring, response, and control operation

Qualifications
Education/Experience:

10 years of information security experience, including 5 years focused on security operations, incident response, or detection engineering, required

5 years of direct people leadership experience, including hiring, performance management, and on call ownership, required

Experience owning a function level budget, vendor relationships, and a staffing plan, required

Bachelor’s degree in information systems, computer science, or a related field, or equivalent practical experience

Industry recognized certification(s) highly recommended: GCIH, GCIA, GCFA, CISSP, or CISM

Required Skills/Abilities

Hands on operational experience with SIEM platforms, including query authoring, data modeling, and detection development

Hands on experience with EDR platforms, including policy design, containment actions, and threat hunting

Experience operating email security controls and phishing response at scale

Working knowledge of attacker tradecraft including initial access, persistence, privilege escalation, lateral movement, and exfiltration

Practical use of MITRE ATT&CK for coverage assessment and detection planning

Incident response and forensic practice, including host and cloud artifact analysis, chain of custody, and timeline construction

Cloud detection and response experience in AWS, Azure, or GCP, including identity provider telemetry such as Okta or Entra ID

Scripting and automation ability (Python, PowerShell, or similar) for enrichment, response actions, and SOAR workflows

Strong knowledge of TCP/IP, DNS, HTTP, and operating system internals for Windows and macOS

Knowledge of secure configuration management and endpoint security technologies across multiple platforms

Understanding of compliance areas including controls for SOC 2, PCI DSS, and applicable state privacy and breach notification requirements

Ability to remain calm and decisive during active incidents and to communicate status clearly to technical and executive audiences

Strong verbal and written communication, including the ability to translate technical risk into business terms for non technical stakeholders

Proven ability to build rapport and durable working relationships with business, IT, and engineering leaders

Ability to influence without direct authority and to position security as a pragmatic, value added partner rather than a control function

Strong documentation and communication skills

Curious, inquisitive, innovative, lifelong learner and self-starter

Able to effectively give, receive, and respond to feedback

National Debt Relief Role Qualifications:

Computer competency and ability to work with a computer.

Prioritize multiple tasks and projects simultaneously.

Exceptional written and verbal communication skills.

Punctuality expected, ready to report to work on a consistent basis.

Attain and maintain high performance expectations on a monthly basis.

Work in a fast-paced, high-volume setting.

Use and navigate multiple computer systems with exceptional multi-tasking skills.

Remain calm and professional during difficult discussions.

Take constructive feedback.

Available for full-time position.

Compensation Information
Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target for each position across the US. Within the range, individual pay is determined by work location, job-related skills, experience, and relevant education or training. This good faith pay range is provided in compliance with NYC law and the laws of other jurisdictions that may require a salary range in job postings. The salary for this position is $197,500.00 to $227,000.00.About National Debt Relief
National Debt Relief was founded in 2009 with the goal of helping an expanding number of consumers deal with overwhelming debt. We are one of the most-trusted and best-rated consumer debt relief providers in the United States. As a leading debt settlement organization, we have helped over 450,000 people settle over $10 billion of debt, while empowering them to lead a healthier financial lifestyle and feel free to live their best life. At National Debt Relief, we treat our clients like real people. Our purpose is to elevate, empower, and transform their lives.
Rated A+ by the Better Business Bureau, our goal is to help individuals and families get out of debt with the least possible cost through conducting financial consultations, educating the consumer and recommending the appropriate solution. We become our clients' number one advocate to help them reestablish financial stability as quickly as possible.
Want to learn more about who we are? Connect with us on social!
Benefits
National Debt Relief is a team-oriented environment full of rewards and growth opportunities for our employees. We are dedicated to our employee's success and growth within the company, through our employee mentorship and leadership programs.
Our extensive benefits package includes:

Generous Medical, Dental, and Vision Benefits

401(k) with Company Match

Paid Holidays, Volunteer Time Off, Sick Days, and Vacation

12 weeks Paid Parental Leave

Pre-tax Transit Benefits

No-Cost Life Insurance Benefits

Voluntary Benefits Options

ASPCA Pet Health Insurance Discount

Wellness Incentive Program

National Debt Relief is a certified Great Place to Work®!
National Debt Relief is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability status, or any other status protected by law.
For information about our Employee Privacy Policy, please see hereFor information about our Applicant Terms, please see here
#JC-1
Originally posted on Himalayas