Director of Cyber Security

Jobtailor; Concord (MA); Hybrid; USD 180,000 - 260,000; Full time

Job summary

Jobtailor in Concord, MA is seeking a seasoned cybersecurity leader to define and drive the organization’s security strategy. You will lead a global team, partner with engineering to embed security, and manage security operations, threat detection, and vendor relationships.

The role requires 10+ years in cybersecurity, experience maturing security programs, and strong communication skills to report progress to senior leadership. Hybrid work with on-site presence in Concord essential.

Qualifications

• 10+ years of progressive experience in cybersecurity or closely related field, including significant people-leadership experience.
• Experience building or maturing security programs in a complex, technology-driven environment.
• Strong experience across multiple security domains (security operations, incident response, vulnerability management, IAM, cloud/app security, or security architecture).
• Strong technical skills in Linux, endpoints, and servers.
• Knowledge of networking, firewalls, and Kubernetes.
• Understanding of NIST CSF, CIS, SOC 2, and PCI-DSS frameworks.
• Excellent communication, able to explain risk to executives and engineers.
• Experience developing security metrics and reporting to senior leadership.
• Hybrid work model with Concord office attendance of 3+ days/week.
• Equivalent experience or training in lieu of degree accepted.
• Curiosity about AI and automation.
• Must work from the required office at least 3 days per week.
• Must not require US visa sponsorship; no sponsorship available.

Responsibilities

• Define and execute the organization’s cybersecurity strategy, roadmap, and operating model with the CISO and senior teammates
• Ensure security initiatives are measurable, actionable, and aligned with business priorities
• Lead, mentor, and support a global team of security engineers across incident response, vulnerability management, IAM, and application security
• Own day-to-day security program operations, including threat detection and response, vulnerability management, and endpoint security
• Partner with engineering, infrastructure, and product teams to embed security into system development and operations
• Manage vendor relationships and contribute to security tooling and services budget planning
• Support hiring, onboarding, and career development of team members
• Foster a culture of learning, collaboration, and continuous improvement
• Champion AI and automation to improve team operations
• Evaluate emerging threats and technologies, including AI security implications

Skills

Cybersecurity Strategy

People Leadership

Incident Response

Vulnerability Management

IAM

Cloud Security

Application Security

Endpoint Security

Linux

Networking

Kubernetes

Communication

Metrics & Reporting

Curiosity about AI

Tools

Security Tooling

AI Automation

NIST CSF

CIS

SOC 2

PCI-DSS

Job description

• Define and execute the organization’s cybersecurity strategy, roadmap, and operating model with the CISO and senior teammates


• Ensure security initiatives are measurable, operationally actionable, and aligned with business priorities


• Lead, mentor, and support a global team of security engineers across incident response, vulnerability management, IAM, and application security


• Own day-to-day security program operations, including threat detection and response, vulnerability management, and endpoint security


• Partner with engineering, infrastructure, and product teams to embed security into system development and operations


• Manage vendor relationships and contribute to security tooling and services budget planning


• Support hiring, onboarding, and career development of team members


• Foster a culture of learning, collaboration, and continuous improvement


• Champion AI and automation to improve team operations


• Evaluate emerging threats and technologies, including AI security implications

Requirements

• 10 or more years of progressive experience in cybersecurity or a closely related field, including significant people-leadership experience


• Demonstrated success building or maturing security programs in a complex, technology-driven environment


• Strong experience across multiple security domains, such as security operations, incident response, vulnerability management, IAM, cloud security, application security, or security architecture


• Strong technical skills in endpoint and server operating systems, especially Linux


• Knowledge of computer networking, firewalls, and Kubernetes


• General understanding of NIST CSF, CIS, SOC 2, and PCI-DSS frameworks


• Excellent communication skills, with the ability to explain technical risk clearly to executives, engineers, and business partners


• Experience developing meaningful security metrics and reporting progress to senior leadership


• Ability to work in a hybrid model and attend the Concord office at least 3 days a week


• Equivalent experience, training, or transferable skills accepted in lieu of a relevant degree


• Curiosity about emerging technologies, including AI and automation


• Must be able to work from the required office at least 3 days per week


• Must not require US visa sponsorship; KAYAK cannot offer work sponsorship, including OPT, at this time

Core Competencies

Demonstrates extensive experience in defining and executing cybersecurity strategies, leading global security teams, and embedding security practices within technology operations. Proficient in developing security metrics and managing vendor relationships while fostering a culture of continuous improvement and collaboration.

Highest-signal resume keywords

• Cybersecurity Strategy Development


• People Leadership in Security


• Incident Response Management


• Vulnerability Management


• Cloud Security Expertise

Hard Skills

• Cybersecurity


• Incident Response


• Vulnerability Management


• Identity And Access Management (IAM)


• Application Security


• Endpoint Security


• Linux Operating Systems


• Computer Networking


• Firewalls


• Kubernetes

Soft Skills

• Excellent Communication


• Mentoring


• Collaboration


• Curiosity About Emerging Technologies

Industry Keywords

• Cybersecurity Programs


• Security Operations


• Technology-Driven Environment


• Security Metrics


• Hybrid Work Model

Tools & Technologies

• Security Tooling


• AI Automation


• NIST CSF


• CIS


• SOC 2


• PCI-DSS