Director, Security Operations & Threat Response

Acrisure; Grand Rapids (MI); Hybrid; USD 180,000 - 260,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

Wellness resources

Paid time off

Job summary

Acrisure in Grand Rapids, MI is seeking a Director of Security Operations to lead day-to-day enterprise security functions, including monitoring, incident response, threat hunting, and platform management. The role emphasizes automation, process maturity, and collaboration with Technology, Legal, Privacy, HR, and business units.

You will build scalable operating models across a global environment, drive detection coverage improvements, and mentor a team of managers, engineers, and analysts.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.
• 10+ years of progressive cybersecurity experience.
• 5+ years leading Security Operations, Incident Response, Threat Hunting, SOC, or Cyber Defense teams.
• Experience managing enterprise security operations in complex, hybrid cloud environments.
• Deep understanding of incident response methodologies, threat detection, cyber defense operations, and security monitoring practices.
• Experience with one or more enterprise security platforms including Microsoft Defender, Sentinel, SentinelOne, Google SecOps, Splunk, CrowdStrike, Palo Alto, or comparable technologies.

Responsibilities

• Lead security operations teams responsible for security monitoring, alert triage, incident response, threat hunting, and cyber defense activities.
• Establish operational priorities and execution plans aligned with organizational risk reduction objectives.
• Build scalable operating models that enable efficient detection, investigation, and response across a global environment.
• Ensure consistent operational processes, documentation, escalation procedures, and service delivery standards.
• Develop and mentor managers, engineers, and analysts while fostering accountability, ownership, and continuous improvement.
• Oversee enterprise detection and response capabilities across endpoint, identity, cloud, network, email, and application environments.
• Ensure timely identification, investigation, containment, eradication, and recovery of cybersecurity incidents.
• Act as a senior escalation point for major incidents and provide executive-level situational updates when required.
• Lead operational readiness programs including playbooks, runbooks, tabletop exercises, simulations, and incident reviews.
• Drive improvements to detection coverage and response effectiveness based on emerging threats, incidents, and intelligence.
• Coordinate with Legal, Privacy, Human Resources, Compliance, Internal Audit, and Technology teams during security incidents.
• Establish communication models and escalation paths for major cyber events.
• Lead post-incident reviews to identify root causes, lessons learned, and corrective actions.
• Ensure operational activities support regulatory, contractual, and reporting requirements.
• Define and maintain meaningful operational metrics and KPIs including MTTD, MTTR, Detection Coverage, Incident Severity Trends, and more.

Skills

Leadership

Security operations

Incident response

Threat hunting

Threat detection

Risk reduction

Education

Bachelor's degree in cybersecurity or related field

Tools

Microsoft Defender

Microsoft Sentinel

SentinelOne

Splunk

CrowdStrike

Palo Alto

EDR/XDR

Job description

Acrisure in Grand Rapids, MI is seeking a Director of Security Operations to lead day-to-day enterprise security functions, including monitoring, incident response, threat hunting, and platform management. The role emphasizes automation, process maturity, and collaboration with Technology, Legal, Privacy, HR, and business units.

You will build scalable operating models across a global environment, drive detection coverage improvements, and mentor a team of managers, engineers, and analysts.