Director of Cyber Security Operations

🕒 September 28

🇺🇸 United States – Remote

💵 $208.5k - $235.8k / year

⏰ Full Time

🔴 Lead

🛡️ Security Operations

👻 Ghost score 6%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Open for 46 days.
• Jobs at this company usually fill in 31 days.

Apply Now

Check your resume score

Customize resume + cover letter

Find Similar Remote Jobs

☆ Save☑️ Mark as applied❌ Hide

Report problem

U.S. Financial Technology

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2014

💳 Fintech

☁️ SaaS

🤝 B2B

Fintech • SaaS • B2B

U. S. Financial Technology is the largest and most technologically advanced mortgage securitization platform in the U. S. , operating the Common Securitization Platform for Fannie Mae and Freddie Mac. It manages issuance and administration of Single-Family Mortgage-Backed Securities (SF MBS / UMBS), centrally houses loan- and pool-level data in a 100% cloud-based platform, and provides near real-time reporting, analytics, and operational services to support lenders, GSEs, and investors. The company emphasizes data management, risk and cybersecurity, and enabling liquidity in the primary mortgage market to facilitate home purchases and refinances.

📋 Description

• Lead enterprise-scale monitoring operations, including 24×7 SOC oversight, real-time detection and alerting, telemetry optimization, and automation • Direct incident response and digital forensics programs, coordinating containment, eradication, and recovery • Manage executive and regulatory communications during major security events • Support vulnerability management, secure configuration baselines, patch governance, system integrity, authorized change, and compliance alignment • Architect and operationalize SIEM, SOAR, and AI/ML-driven security platforms and analytics • Oversee cloud-native and hybrid security operations across AWS, Azure, and GCP • Embed DevSecOps practices, workload segmentation, and identity governance across cloud environments • Define and report cyber-risk posture to executive leadership and regulatory bodies • Drive cybersecurity process automation, technology modernization, predictive detection, and orchestration • Build, mentor, and lead cybersecurity teams across monitoring, response, engineering, and cloud disciplines • Integrate cybersecurity operations with infrastructure and IT processes and unified incident management workflows • Represent the organization in audits, examinations, and crisis events

🎯 Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field required • Industry certification required, such as GSOM, GSOC, CISSP, CISA, CISM, or equivalent designation • Minimum of 10 years of experience leading enterprise-scale monitoring operations, including 24×7 SOC management, detection and alerting, telemetry and log pipeline optimization, and automated response processes • Minimum of 10 years of experience directing incident response and forensics functions, including major incident handling, digital evidence collection, post-mortem analysis, executive and regulator engagement, and threat containment and eradication • Minimum of 10 years of experience architecting and operationalizing security platforms and tooling, including SIEM/SOAR, AI/ML analytics, enterprise security solutions, and technical roadmaps • Minimum of 6–10 years of experience managing enterprise-level risk-reduction programs, vulnerability management, compliance alignment, secure configuration baselining, patch governance, and audit remediation • Minimum of 6–10 years of experience overseeing cloud-native cybersecurity operations across AWS, Azure, and GCP, including DevSecOps, hybrid infrastructure compliance, identity, access, and workload isolation • Applicants must be authorized to work in the US without requiring employer sponsorship currently or in the future • Deep expertise in Security Operations Center design and management • Advanced proficiency in incident response leadership and digital forensics • Proven ability to architect and maintain SIEM and SOAR platforms, including Splunk, Power Automate, scripting, and KQL • Strong knowledge of AI/ML integration in cybersecurity, behavior-based analytics, anomaly detection, and large language model applications • Expertise in vulnerability management, threat-based prioritization, patch lifecycle governance, secure configuration baselines, and threat detection • Advanced understanding of secure cloud architecture and DevSecOps across AWS, Azure, and GCP • Proficiency in digital forensics and evidence preservation, including memory, disk, and network artifact analysis • Capability to lead cybersecurity risk governance aligned with NIST CSF, ISO 27001, SOC 2, and FHFA/Fed examination requirements • Strong command of cybersecurity automation and orchestration frameworks • Strong knowledge of identity and access management, least-privilege enforcement, and privileged-access controls • Experience implementing and tuning DLP, insider risk, and threat intelligence programs • Fluency in security metrics and KPI development • Skills in cross-functional program leadership • Expertise in vendor and third-party risk management • Ability to design and execute cybersecurity testing and validation programs, including tabletop exercises and red team coordination • Strong communication and executive presentation skills • Track record of innovation and continuous improvement using automation, ML/AI, and analytics • Exceptional leadership and team-building ability

🏖️ Benefits

• Performance bonus • 401(k) match • Healthcare coverage • Paid time off (PTO) • Competitive total compensation package • Background investigation and possible credit check as a condition of employment

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume