Director, Security Operations & Incident Response

Accelerant; United States; Remoto; USD 190.000 - 250.000; Tempo pieno

Descrizione del lavoro

Accelerant is hiring a Director, Security Operations to lead the security engineering team and partner with the CISO on strategic security initiatives. You will own threat detection, incident response, and controls across acquisitions, including SOC coordination for multiple regions.

You will drive the penetration testing cycle, manage vendors, and stay hands-on to guide technical security decisions while mentoring engineers. This role reports to the CISO.

Competenze

• 6 to 9 years of security engineering experience.
• Breadth across cloud security, network security and detection engineering, with depth in Azure and Microsoft Sentinel.
• Experience leading incident response for technical incidents, including post-incident reviews.
• Experience assessing the security of acquisitions.
• Familiarity with modern identity and authentication, including passkeys and privileged access.
• Experience hiring, line-managing and developing security engineers.
• Able to write a clear risk narrative and present it to leadership.
• Sound judgment on ambiguous problems, and good prioritization across competing demands.
• Experience managing security vendor relationships.
• Willing to stay close to the technical work: this is not a pure management role.

Mansioni

• The Director, Security Operations owns the high-judgment security work and is accountable for results in five areas.
• Lead security due diligence and post-close integration assessments as deal volume grows.
• Build and maintain a repeatable integration playbook: assessment checklist, risk scoring, remediation plan and day-one controls.
• Write clear risk narratives and recommendations for the CISO and deal teams.
• Lead the penetration test cycle: scoping, triage, remediation tracking and reporting to leadership.
• Own the SOC sync across Accelerant and Mission US/UK: shared priorities, escalation paths, handoffs and coverage gaps.
• Own the detection platform strategy, including Microsoft Sentinel cost and ingestion, without losing detection coverage.
• Act as incident response manager for technical incidents, leading the response from triage through to resolution.
• Own the technical incident response playbooks and keep them current.
• Lead lessons-learned reviews after incidents and recommend control changes, tracked through to completion.
• Run control reviews and recommend improvements where gaps appear.
• Act as the internal escalation point for the external SOC, advising on potential incidents that need more judgment.
• Build and lead the security engineering team: partner with the CISO to hire direct reports, then provide line management and technical direction, including assigning work, reviewing output and coaching.
• Manage the security tooling and service vendors in this area, including the full vendor lifecycle: selection, renewals, performance and escalations.
• Step into hands‑on engineering and investigation work when the team needs it.

Conoscenze

Cloud security

Network security

Detection engineering

Azure

Microsoft Sentinel

Incident response leadership

M&A security integration

Vendor management

Security strategy

People leadership

Strumenti

Microsoft Sentinel

Azure

Cloudflare

Pentest program

Descrizione del lavoro

Accelerant is hiring a Director, Security Operations to lead the security engineering team and partner with the CISO on strategic security initiatives. You will own threat detection, incident response, and controls across acquisitions, including SOC coordination for multiple regions.

You will drive the penetration testing cycle, manage vendors, and stay hands-on to guide technical security decisions while mentoring engineers. This role reports to the CISO.