Director, Cybersecurity Operations

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

DLS Discovery, LLC

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2018

⚖️ Legal

🏢 Enterprise

📋 Compliance

Legal • Enterprise • Compliance

DLS Discovery, LLC is a leading provider of eDiscovery, managed document review, and trial and legal support services. Based in Wilmington, Delaware, the company has built a strong reputation by supporting AM Law100 law firms, Fortune 500 companies, as well as national and local law firms and corporations. Known for its individualized approach, DLS Discovery emphasizes communication and custom-fit technological solutions to enhance the efficiency and effectiveness of its services. The company offers a wide range of services including forensic collections, document hosting, analytics, trial support, litigation support, and more, all while focusing on innovative ways to preserve resources and save clients money.

📋 Description

• Lead Security Operations and Incident Response, Security Engineering, Vulnerability Management, and Threat Intelligence • Own the MDR relationship, including SLA management, escalations, detection tuning, and quarterly threat hunt reviews • Lead incident response, including runbooks, major incident coordination, executive communication, and root cause analysis • Oversee SOC detection engineering, SIEM rules, SOAR playbooks, and automated response actions • Direct and develop the security analyst pool and redeploy capacity toward MDR validation, threat hunting, and stakeholder reporting • Oversee endpoint, identity, cloud, and application security engineering lanes • Drive security architecture reviews and engineering decisions for large or complex IT projects • Shape the security tooling strategy and evaluate, select, and retire security tools • Enforce automation-first practices, including IaC security gates, CI/CD security, CSPM auto-remediation, and SOAR workflows • Lead threat intelligence operationalization, vulnerability management, purple team, control validation, and threat modeling programs • Oversee AppSec, secure SDLC, code review gates, SAST/DAST tooling, and collaboration with Product and Engineering • Own cloud security posture management, cloud workload protection, cloud IAM governance, and cloud-native security architecture • Set team-wide AI security posture, including model security, prompt injection testing, and AI tool access governance • Mature MDR deployment and integrate outputs with SIEM, IAM, and compliance evidence workflows • Evaluate emerging security technologies and make build/buy/partner recommendations to the CISO • Lead, develop, and performance-manage a lean engineering team • Partner with the Director, Cyber GRC and report metrics on incidents, controls, MDR, vulnerabilities, and team development to the CISO

🎯 Requirements

• 15+ years of progressive experience in information security, including at least 7 years in a security leadership role • Demonstrated ownership of a security operations or engineering function at the Director or equivalent level • Experience operating and maturing an MDR deployment (CrowdStrike Falcon Complete, Arctic Wolf, Expel, or equivalent) in a corporate environment • Hands-on background in at least two of: security engineering, penetration testing/offensive security, cloud security, application security, or incident response • Demonstrated experience deploying or maturing security automation, such as SOAR playbooks, detection engineering, IaC security, or CI/CD pipeline security • Familiarity with cloud-native security (AWS, Azure, or GCP), including CSPM, cloud IAM, and workload protection • Working knowledge of NIST SP 800-171, ISO 27001, and SOC 2 • Understanding of vulnerability management lifecycle, including scanning, prioritization, remediation tracking, and SLA enforcement • Familiarity with SAST/DAST tooling, secure SDLC, and CI/CD security gate integration • Understanding of IAM security governance, including PAM, access review programs, and SSO/MFA architecture • Exceptional executive, client, and regulator communication skills • Bachelor's degree in Information Security, Computer Science, Engineering, Business, or a related field required • Professional certifications such as CISSP, CISM, CISA, GPEN, GCIA, or other GIAC certifications strongly preferred • Master's degree or MBA with a security focus preferred