Director, Security Operations Enablement & Data Platforms

American International Group; New York, Northern (NY, KY); Hybrid; USD 125,000 - 150,000; Full time

Job summary

American International Group, Inc. (AIG) is seeking a Director of Security Operations Enablement to lead engineering and enablement for Data Engineering, Data Analytics, and SIEM/SOAR.

This role oversees a global team and defines the strategic roadmap for Security Operations platforms and capabilities. You will collaborate with Incident Response, GCDC, and Security Engineering to shape target state architectures and drive modern practices such as infrastructure as code, CI/CD, and scalable

Qualifications

• 10+ years of experience in Cyber Security Engineering, Security Operations, or a related field.
• Experience leading engineering teams delivering large-scale security platforms (e.g. SIEM, SOAR, data platforms).
• Strong understanding of Security Operations processes, including detection, triage, and response workflows.
• Proven ability to define and execute technology strategy in complex, global organizations.
• Experience managing and developing high-performing engineering teams in a distributed environment.
• Excellent stakeholder management and communication skills, with the ability to engage both technical and non-technical audiences.
• Strong analytical and problem-solving capabilities, with a data-driven approach to decision making.
• Experience working with security vendors and managing strategic partnerships.
• Ability to operate effectively at both tactical and strategic levels, balancing immediate operational needs with long-term vision.
• Familiarity with cloud platforms, modern data architectures, and scalable engineering patterns.

Responsibilities

• Own and lead the Security Operations Enablement function, covering Data Engineering, Data Analytics, and SIEM/SOAR engineering.
• Define and deliver the strategic roadmap for Security Operations platforms and capabilities.
• Manage and develop a global team of 20+ engineering resources, fostering a high-performance culture.
• Govern the lifecycle of Security Operations technologies, including platform selection, implementation, optimization, and decommissioning.
• Ensure availability, performance, and continuous improvement of data pipelines, detection engineering, and automation capabilities.
• Partner with GCDC and Incident Response leadership to translate requirements into technical solutions.
• Collaborate with Security Engineering and Enterprise Architecture to define target state architectures.
• Drive the adoption of modern engineering practices, including infrastructure as code, CI/CD, and scalable automation frameworks.
• Establish and maintain vendor relationships, influencing product direction and ensuring value realization from strategic partners.
• Define and track performance metrics for Security Operations technologies, using data-driven insights to improve outcomes.
• Lead governance, risk, and compliance activities related to enablement platforms, ensuring alignment with enterprise standards.
• Act as a key contributor to tactical and strategic decision-making within the Information Security Office.
• Support innovation initiatives, including the adoption of advanced analytics, AI, and automation capabilities within Security Operations.

Skills

Cyber security engineering

Security operations

SIEM/SOAR

Data engineering

Data analytics

Cloud platforms

Stakeholder management

Leadership

Team management

Vendor management

Architecture collaboration

Tools

SIEM/SOAR

Data pipelines

Automation frameworks

Job description

American International Group, Inc. (AIG) is seeking a Director of Security Operations Enablement to lead engineering and enablement for Data Engineering, Data Analytics, and SIEM/SOAR.

This role oversees a global team and defines the strategic roadmap for Security Operations platforms and capabilities. You will collaborate with Incident Response, GCDC, and Security Engineering to shape target state architectures and drive modern practices such as infrastructure as code, CI/CD, and scalable