Director of AI-Driven Cyber Defense & SOC Transformation

Gotham Technology Group; Irving (TX); On-site; USD 180,000 - 260,000; Full time

Job summary

Our client is seeking a Director of Cyber Defense to lead a modern, AI-driven security program across multiple entities in regulated financial services. The role focuses on building an internal SOC, deploying agentic AI for triage and response, and aligning with a comprehensive security architecture including Microsoft Sentinel, Defender, and Entra ID.

The ideal candidate will bring 10+ years in cyber defense, hands-on SOC transformation, and demonstrable AI/automation experience, with the

Qualifications

• 10+ years in cyber defense or security operations with leadership experience.
• Proven track record building or transforming a SOC.
• Hands-on AI/automation applied to security operations with specifics.
• Deep knowledge of Microsoft security ecosystem (Sentinel/Defender/Entra ID) and Splunk background.
• Experience monitoring security across multiple business units in regulated industries.
• Familiarity with MITRE ATT&CK and modern SOAR platforms.
• Certifications such as CISSP, CISM, GCFA or ability to obtain one.
• Ability to communicate security posture to technical and executive leadership.

Responsibilities

• Own and mature the cyber defense function across a multi-entity environment.
• Lead the transition from outsourced SOC to internal SOC and build the team.
• Design and deploy agentic AI for alert triage, investigation, and response with human oversight.
• Guide Microsoft Sentinel rollout within broader Azure/Defender/Entra ID architecture.
• Set governance for AI use in security operations.
• Own incident response across the portfolio including major incident command and post-incident reviews.
• Build threat intelligence and proactive threat hunting program.
• Represent cyber defense to entity leadership, legal, compliance, and the board.
• Coach and grow a high-performing SOC team.

Skills

Cyber defense leadership

SOC transformation/build

AI/Automation in security

Microsoft security ecosystem

Splunk/SOC/SIEM

Security monitoring across units

Regulated industry experience

MITRE ATT&CK

SOAR platforms

Communication with exec leadership

Education

Security certification (CISSP/CISM/GCFA/GCIA)

Tools

Microsoft Sentinel

Defender

Entra ID

Splunk

Job description

Our client is seeking a Director of Cyber Defense to lead a modern, AI-driven security program across multiple entities in regulated financial services. The role focuses on building an internal SOC, deploying agentic AI for triage and response, and aligning with a comprehensive security architecture including Microsoft Sentinel, Defender, and Entra ID.

The ideal candidate will bring 10+ years in cyber defense, hands-on SOC transformation, and demonstrable AI/automation experience, with the