Director, Threat Detection & Response

EPX; United States; A distancia; USD 175.000 - 235.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical, Dental, & Vision Coverage

401(k) + Match

Mental Health Support & Well-Being

Paid Parental Leave

Education Assistance

Lifestyle Spending Account

Descripción de la vacante

North is seeking a Director of Threat Detection and Response to lead a highly technical security organization. You will define strategy, build capabilities across incident response, detection engineering, threat hunting, and cyber threat intelligence, and act as the escalation point for executives during critical incidents.

You will manage a senior team, drive log pipelines, and ensure rapid triage and remediation across cloud, network, endpoint, and identity security.

Formación

• Bachelor's degree or equivalent experience in CS/cyber security.
• 10+ years of hands-on information security with incident response, detection engineering and threat hunting.
• Proven leadership of complex security operations and high-performing technical teams.

Responsabilidades

• Serve as senior incident commander for major, high-severity security incidents.
• Oversee incident response strategy: triage, containment, eradication, recovery across multiple layers.
• Lead threat hunting programs based on MITRE ATT&CK to uncover undetected compromises.
• Direct detection engineering to develop and tune high-fidelity detection logic.
• Mentor a team of incident responders, detection engineers and threat hunters.
• Translate technical findings into clear narratives for executives and board.

Conocimientos

Incident Response

Threat Hunting

Detection Engineering

Executive Briefing

Team Leadership

MITRE ATT&CK

Cloud Security

PCI-DSS

Log Analysis

Educación

Bachelor's degree in Computer Science, Cyber Security or related field

Relevant certifications (see GCFA, GCIH, GNFA, GCTI, OSCP, OSIR, CySA+)

Herramientas

SIEM platforms

Digital forensics tools

Log collection & data pipelines

Descripción del empleo

**Director, Threat Detection & Response****North- Remote, US** North is seeking a Director of Threat Detection and Response to serve as a key cybersecurity and technical leader. You will be responsible for defining the strategy and building the capabilities of our Incident Response, Detection Engineering, Threat Hunting, and Cyber Threat Intelligence. As the leader of this highly technical group, you will oversee the prevention, detection, and response to complex cybersecurity threats targeting North's payment processing infrastructure. You will manage a team of deeply experienced experts, ensuring the team maintains the highest technical standards in cloud, network, endpoint, and identity security, while acting as the ultimate escalation point for executive leadership during critical incidents. **What you'll do:*** Serve as the senior incident commander and ultimate escalation point during major, high-severity security incidents.* Direct the organization's incident response strategy, ensuring rapid triage, containment, eradication, and recovery across endpoint, network, cloud, identity, and application layers.* Oversee comprehensive digital forensics and root cause analysis, driving cross-team remediation of systemic gaps and mitigating fraud or financial loss.* Direct the strategy for detection engineering, ensuring the team develops, tunes, and validates high-fidelity detection logic.* Lead proactive, hypothesis-driven threat hunting programs based on incident trends and the MITRE ATT&CK framework to uncover undetected compromises.* Build and integrate a Cyber Threat Intelligence to proactively identify and counter emerging adversary TTPs relevant to the payments industry.* Drive the strategy and buildout of the company's enterprise logging and data pipelines, ensuring comprehensive visibility across cloud and on-premises environments to power high-fidelity detection and rapid investigations.* Manage, mentor, and develop a high-performing team of senior incident responders, detection engineers, and threat hunters.* Translate complex technical findings and incident outcomes into clear, actionable narratives for North's executive leadership and board of directors. **What we need from you:*** Bachelor's degree in Computer Science, Cyber Security or related field, or combination of education and experience.* 10+ years of hands-on information security experience, with deep subject-matter expertise in incident response, detection engineering, and threat hunting.* Hands-on expertise managing complex security incidents, advanced threat hunting, and detection engineering across modern environments (cloud, identity, network, endpoint).* Demonstrated track record in a leadership role overseeing complex security operations and high-performing technical teams.* Proficiency with advanced Incident Response tools, digital forensic protocols, log analysis techniques, and managing detection rules in modern platforms.* Strong expertise in log management and telemetry, including designing and overseeing log collection architectures and data pipelines across complex cloud and on-premises environments.* Expertise in navigating the intersection of AI and cybersecurity, with specific experience investigating attacks on AI agents, countering AI-facilitated threats, and integrating AI agents into incident response workflows.* Architectural understanding of internal AI and agentic infrastructure, ensuring the secure deployment, monitoring, and incident readiness of in-house models and autonomous agent networks.* Solid understanding of cloud infrastructure (AWS, Azure, GCP), Windows/Linux systems, and modern identity platforms.* Familiarity with the payments/fintech regulatory environment, including working knowledge of PCI-DSS.* Excellent communication skills, with a proven ability to brief executive leadership, legal, and compliance teams during high-pressure situations. **Preferred Certifications:*** GIAC Certified Forensic Analyst (GCFA)* GIAC Certified Incident Handler (GCIH)* GIAC Network Forensic Analyst (GNFA)* GIAC Cyber Threat Intelligence (GCTI)* Offensive Security Certified Professional (OSCP)* Offensive Security Incident Response (OSIR)* CompTIA CySA+ **Salary Range: $175,000- $235,000** Pay within this range varies by work location and on job-related knowledge, skills, and experience. We look forward to discussing your salary expectations and our full total rewards offerings throughout the interview process.**What we offer:**We offer a comprehensive benefits package that enables our teams to live a *life well lived,* both personally and professionally. Some of our perks include:* Medical, Dental, & Vision Coverage* Flexible Paid Time Off* 401(k) + Match* Mental Health Support & Well-Being Program* Paid Maternity & Paternity Leave* Education Assistance* Company-funded Lifestyle Spending Account***Please note: North is a US based company and this role is not eligible for current or future sponsorship.***