Director, Cyber Defense

🕒 August 25

🇬🇧 United Kingdom – Remote

⏰ Full Time

🔴 Lead

👔 Director

🇬🇧 UK Skilled Worker Visa Sponsor

This company has sponsored UK Skilled Worker visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Kyndryl

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 2021

💼 Consulting

📦 Logistics

🏥 Healthcare

Consulting • Logistics • Healthcare

Kyndryl is a leading IT infrastructure services provider, serving thousands of enterprise customers worldwide. The company specializes in designing, building, managing, and modernizing complex, mission-critical information systems. Kyndryl offers a range of services including IT consulting, cloud services, cybersecurity, data and AI solutions, and digital workplace transformation. With a strong focus on innovation, partnerships, and co-creation, Kyndryl helps businesses tackle IT complexity and drive operational excellence. The company operates across various industries such as automotive, healthcare, banking, and more, providing expertise and solutions to address industry-specific challenges. Kyndryl's global network and strategic alliances empower enterprises to adapt to the evolving technology landscape, ensuring their essential systems are reliable and efficient.

📋 Description

• Lead 24/7 global security operations through a follow-the-sun model across AMER, EMEA, and APAC • Own the full incident response lifecycle from triage through post-incident review • Maintain forensic preservation standards throughout incident response • Coordinate with the Incident Commander function using escalation authorities, runbooks, and cross-functional protocols • Direct the Cyber Threat Intelligence program • Convert adversary intelligence into detection requirements, control coverage decisions, and defensive architecture changes • Govern ATT&CK-aligned detection coverage based on measured efficacy • Establish continuous validation through adversary emulation and detection testing • Set detection-as-code discipline, including version-controlled content, release rigor, automated testing, and telemetry quality standards • Drive operational measurement to compress the detect-decide-act cycle against AI-accelerated adversaries • Coordinate with Vulnerability Management on remediation prioritization and exploitability-informed sequencing • Collaborate with the AI-Driven Cyber Defense team to integrate automation and ML into defensive operations • Build and develop a globally diverse team across technical, analytical, and leadership competencies • Report to the Vice President and Deputy CISO, Cyber Operations

🎯 Requirements

• 12+ years in cybersecurity operations, incident response, threat intelligence, or SOC leadership • At least 5 years in a senior leadership role over a globally distributed team • Proven ability to lead security operations and incident response at enterprise scale • Strong command of threat-informed defense, MITRE ATT&CK, and kill chain analysis • Working command of detection engineering, detection-as-code, content lifecycle management, and validation discipline • Strong command of incident response methodologies and escalation processes • Experience running geographically distributed teams • Effective communication with technical teams and executive leadership • Track record leading a cyber defense or security operations program at comparable scale and complexity • Experience defending a hybrid or multi-cloud enterprise estate • Experience operationalizing threat intelligence into detection coverage and defensive architecture • Familiarity with continuous validation practice • Dedication to continuous learning through self-directed, certification, military, and formal education sources

🏖️ Benefits

• Flexible, supportive environment • Well-being prioritized • Be Well programs supporting financial, mental, physical, and social health • Personalized development goals and continuous feedback • Cutting-edge learning opportunities • Certifications with Microsoft, Google, and Amazon • Coaching and hands-on experiences • Flexible, hybrid-friendly culture