Director, Threat Detection – Response

🔥 6 minutes ago

🇺🇸 United States – Remote

💵 $175k - $235k / year

⏰ Full Time

🔴 Lead

👔 Director

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

North

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

North is a comprehensive payment solutions provider. Specializing in point of sale systems, payment processing, and merchant services, North offers a wide array of products to streamline business operations both online and offline. Their services include secure mobile payments, ecommerce gateways, POS solutions, and back-office tools such as invoicing, reporting, inventory management, and customer loyalty programs. North supports diverse industries, including retail, restaurants, healthcare, gaming, and more, with robust solutions tailored to specific business needs. They offer scalable options for enterprises and franchises and provide APIs for developers to create integrated payment solutions. Committed to security, North ensures all transactions are PCI DSS-validated with advanced encryption and tokenization.

📋 Description

• Serve as senior incident commander and ultimate escalation point during major, high-severity security incidents • Direct incident response strategy across endpoint, network, cloud, identity, and application layers • Oversee digital forensics and root cause analysis, driving remediation of systemic gaps and mitigating fraud or financial loss • Direct detection engineering strategy and ensure development, tuning, and validation of high-fidelity detection logic • Lead hypothesis-driven threat hunting programs based on incident trends and the MITRE ATT&CK framework • Build and integrate Cyber Threat Intelligence capabilities to identify and counter emerging adversary TTPs relevant to the payments industry • Drive enterprise logging and data pipeline strategy across cloud and on-premises environments • Manage, mentor, and develop senior incident responders, detection engineers, and threat hunters • Translate technical findings and incident outcomes into actionable narratives for executive leadership and the board of directors

🎯 Requirements

• Bachelor's degree in Computer Science, Cyber Security or related field, or combination of education and experience • 10+ years of hands-on information security experience • Deep subject-matter expertise in incident response, detection engineering, and threat hunting • Hands-on expertise managing complex security incidents, advanced threat hunting, and detection engineering across cloud, identity, network, and endpoint environments • Demonstrated track record in a leadership role overseeing complex security operations and high-performing technical teams • Proficiency with advanced Incident Response tools, digital forensic protocols, log analysis techniques, and managing detection rules in modern platforms • Strong expertise in log management and telemetry, including designing and overseeing log collection architectures and data pipelines across cloud and on-premises environments • Experience investigating attacks on AI agents, countering AI-facilitated threats, and integrating AI agents into incident response workflows • Architectural understanding of internal AI and agentic infrastructure, including secure deployment, monitoring, and incident readiness of in-house models and autonomous agent networks • Solid understanding of AWS, Azure, GCP, Windows/Linux systems, and modern identity platforms • Familiarity with the payments/fintech regulatory environment, including working knowledge of PCI-DSS • Excellent communication skills, with ability to brief executive leadership, legal, and compliance teams during high-pressure situations • Preferred certifications: GCFA, GCIH, GNFA, GCTI, OSCP, OSIR, CompTIA CySA+ • Must be eligible to work in the United States; role is not eligible for current or future sponsorship

🏖️ Benefits

• Medical, Dental, & Vision Coverage • Flexible Paid Time Off • 401(k) + Match • Mental Health Support & Well-Being Program • Paid Maternity & Paternity Leave • Education Assistance • Company-funded Lifestyle Spending Account