Senior Director, Global Cyber Detection and Response

🔥 3 hours ago

🌐 Poland, Israel – Remote

🇵🇱 Poland – Remote 🇮🇱 Israel – Remote

⏰ Full Time

🟠 Senior

👔 Director

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Danaher Corporation

WebsiteLinkedInAll Job Openings

10,000+ employees

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

Danaher Corporation is a leading global life sciences and diagnostics innovator that develops and supplies instruments, technologies, software, and services to accelerate scientific research, biotechnology development, and clinical diagnostics. The company operates through businesses focused on biotechnology tools, diagnostics platforms, and life sciences products, leveraging the Danaher Business System and an acquisition-driven strategy to scale technologies and support customers across academia, pharmaceutical and biotech companies, and clinical laboratories.

📋 Description

• Own Danaher's global Incident Detection & Response program, including strategy, roadmap, execution, and operational effectiveness • Lead architecture, implementation, and operation of the enterprise detection ecosystem, including SIEM, security data lake, UEBA, SOAR, EDR/XDR, and related platforms • Own the end-to-end telemetry and detection engineering lifecycle, including log onboarding, parsing, normalization, data quality monitoring, MITRE ATT&CK-aligned use cases, validation, tuning, coverage measurement, and retirement • Build, lead, and mature a global 24x7 cyber defense organization across multiple regions and management layers • Drive AI, agentic SOC workflows, automation, threat intelligence, threat hunting, alert triage, investigation, and response orchestration • Establish and govern enterprise incident response and cyber crisis management processes • Manage executive communications, legal and regulatory coordination, third-party incident response providers, tabletop exercises, and audit support • Define and communicate cyber defense performance metrics including MTTD, MTTR, ATT&CK coverage, telemetry health, analyst efficiency, false-positive reduction, backlog management, and program effectiveness • Partner with OpCo CISOs, CIOs, plant leaders, product teams, executive leadership, and audit/risk committees • Report to the Chief Information Security Officer within the Global Information Security organization

🎯 Requirements

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent professional experience) • 12+ years of information security experience • Direct ownership of security operations, detection engineering, and/or incident response within a global organization • Experience standing up, migrating, or modernizing enterprise-scale SIEM environments • Experience with data pipelines, telemetry ingestion, parsing, normalization, and detection content ownership • Deep expertise across the full detection engineering lifecycle • MITRE ATT&CK-aligned detection development and correlation/analytic rule authoring • Experience with detection-as-code and CI/CD for detections • Proven leadership of a 24x7 Security Operations Center and incident response function • Experience with major incident command, executive communications, investigations, and coordination with legal, privacy, compliance, and regulatory stakeholders • Hands-on experience with SOAR, security automation, EDR/XDR, AWS, Azure, GCP, identity threat detection, Cribl, Kafka, and streaming ETL • Ability to lead large-scale information security organizations through multiple management layers • Experience directing globally distributed teams across multiple regions, sites, and business environments • Experience in complex, multi-country enterprises spanning 50+ countries • Ability to travel up to 20–30% of the time, including international travel • Professional certification such as CISSP, CISM, GCIA, GCIH, GCFA, or GNFA is a plus

🏖️ Benefits

• Culture of continuous improvement • Career development and hiring-from-within opportunities • Culture of belonging • Remote work option • Global travel opportunities