Security Operations Director

Cybersecurity Operations requires an industry expert in applying cybersecurity analytics and AI/ML solutions to accelerate a mature global threat hunting function in safeguarding the organization's digital assets and infrastructure. This role requires a combination of cybersecurity domain knowledge and mature engineering rigor to translate operational use cases into production-grade analytics, detection-enablement solutions, and secure AI workflows. You will partner closely with cyber threat hunters, detection engineering, and platform engineering teams to deliver resilient pipelines, advanced analytics, and AI controls that scale operations, improve visibility, and reduce time-to-insight. You will define methodologies for onboarding AI agents into security operations to ensure secure patterns, traceability, and improved outcomes.

Job responsibilities

• Design and implement innovative analytics and AI/ML solutions to produce high confidence leads for investigation.
• Build and maintain data models and transformations to shape endpoint, network, identity, cloud, intelligence, and application data for cybersecurity operations.
• Develop reusable analytic components and libraries for hunting (outlier detection, baselining, clustering, anomaly triage, correlation, campaign tracking).
• Define and implement a secure AI agent framework to boost hunting and defense operations with harnesses to steer AI to better outcomes.
• Establish testing/validation practices to reduce false positives/false negatives and improve analytical integrity.
• Provide technical leadership through mentoring, design/code reviews, and promoting best practices across the organization.
• Be a thought leader and collaborate with cross-functional teams to ensure a coordinated approach to security.

• Formal training or certification with 10+ years of experience in cybersecurity engineering, security data engineering, detection engineering enablement, incident response engineering, or security analytics (not necessarily a dedicated hunter role).
• Demonstrated capability in delivering large-scale analytics and AI/ML solutions.
• Applied experience building AI and agentic frameworks to meet security, audit, and operational requirements.
• Advanced proficiency in programming / scripting languages and SDLC best practices for enterprise environments.
• Strong understanding of attack techniques and how threat actors compromise data, systems, and networks.
• Substantial experience engineering and maintaining systems in production.
• Ability to explain complex technical designs to cybersecurity stakeholders.

• Repeatable delivery of analytics and AI/ML solutions to identify threat activity such as beaconing, lateral movement, data exfiltration, and abuse of cloud.
• Experience with policy-as-code (e.g., OPA) and building agentic platforms and harnesses specifically for cybersecurity use cases.
• Conceptualized and started multiple AI/ML and analytics initiatives for enterprises.
• Industry thought leader/influencer for AI/ML or cybersecurity.