Director, Threat Detection & Response

nabancard

United States

Remote

USD 175,000 - 235,000

Full time

4 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Medical, Dental, & Vision Coverage

Flexible Paid Time Off

401(k) + Match

Mental Health Support & Well-Being

Paid Maternity & Paternity Leave

Education Assistance

Company-funded Lifestyle Spending

Job summary

North is seeking a Director of Threat Detection and Response to lead a highly technical team responsible for incident response, detection engineering, threat hunting, and cyber threat intelligence. You will oversee prevention, detection, and response to threats targeting North's payment processing infrastructure.

You will guide a team of experts across cloud, network, endpoint, and identity security, serving as the escalation point for executive leadership during critical incidents.

Qualifications

10+ years hands-on information security experience, with deep expertise in incident response, detection engineering, and threat hunting.
Experience leading complex security operations and high-performing technical teams.
Hands-on experience managing security incidents across cloud, network, and endpoints.
Proficiency with incident response tools, digital forensics protocols, and log analysis.
Strong ability to communicate complex findings to executives and legal/compliance teams.

Responsibilities

Serve as the senior incident commander during major, high-severity security incidents.
Direct the incident response strategy across endpoints, networks, cloud, identity, and applications.
Oversee digital forensics and root cause analysis to drive remediation and reduce fraud or losses.
Lead detection engineering to tune high-fidelity detection logic.
Head threat hunting programs using MITRE ATT&CK to uncover undetected compromises.
Build Cyber Threat Intelligence to counter emerging adversary TTPs in payments.
Drive enterprise logging and data pipelines for visibility and rapid investigations.
Mentor and develop a high-performing team of incident responders and threat hunters.
Translate technical outcomes into clear narratives for executive leadership and the board.

Skills

Incident response

Threat hunting

Detection engineering

Leadership

Communication

Education

Bachelor's degree in Computer Science or related field

GCFA

GCIH

GNFA

GCTI

OSCP

OSIR

CySA+

Tools

AWS

Azure

GCP

Windows

Linux

PCI-DSS

Job description

Director, Threat Detection & Response

North- Remote, US

North is seeking a Director of Threat Detection and Response to serve as a key cybersecurity and technical leader. You will be responsible for defining the strategy and building the capabilities of our Incident Response, Detection Engineering, Threat Hunting, and Cyber Threat Intelligence.

As the leader of this highly technical group, you will oversee the prevention, detection, and response to complex cybersecurity threats targeting North's payment processing infrastructure. You will manage a team of deeply experienced experts, ensuring the team maintains the highest technical standards in cloud, network, endpoint, and identity security, while acting as the ultimate escalation point for executive leadership during critical incidents.

What you'll do:

Serve as the senior incident commander and ultimate escalation point during major, high-severity security incidents.
Direct the organization's incident response strategy, ensuring rapid triage, containment, eradication, and recovery across endpoint, network, cloud, identity, and application layers.
Oversee comprehensive digital forensics and root cause analysis, driving cross-team remediation of systemic gaps and mitigating fraud or financial loss.
Direct the strategy for detection engineering, ensuring the team develops, tunes, and validates high-fidelity detection logic.
Lead proactive, hypothesis-driven threat hunting programs based on incident trends and the MITRE ATT&CK framework to uncover undetected compromises.
Build and integrate a Cyber Threat Intelligence to proactively identify and counter emerging adversary TTPs relevant to the payments industry.
Drive the strategy and buildout of the company's enterprise logging and data pipelines, ensuring comprehensive visibility across cloud and on-premises environments to power high-fidelity detection and rapid investigations.
Manage, mentor, and develop a high-performing team of senior incident responders, detection engineers, and threat hunters.
Translate complex technical findings and incident outcomes into clear, actionable narratives for North's executive leadership and board of directors.

What we need from you:

Bachelor's degree in Computer Science, Cyber Security or related field, or combination of education and experience.
10+ years of hands‑on information security experience, with deep subject‑matter expertise in incident response, detection engineering, and threat hunting.
Hands‑on expertise managing complex security incidents, advanced threat hunting, and detection engineering across modern environments (cloud, identity, network, endpoint).
Demonstrated track record in a leadership role overseeing complex security operations and high‑performing technical teams.
Proficiency with advanced Incident Response tools, digital forensic protocols, log analysis techniques, and managing detection rules in modern platforms.
Strong expertise in log management and telemetry, including designing and overseeing log collection architectures and data pipelines across complex cloud and on‑premises environments.
Expertise in navigating the intersection of AI and cybersecurity, with specific experience investigating attacks on AI agents, countering AI‑facilitated threats, and integrating AI agents into incident response workflows.
Architectural understanding of internal AI and agentic infrastructure, ensuring the secure deployment, monitoring, and incident readiness of in‑house models and autonomous agent networks.
Solid understanding of cloud infrastructure (AWS, Azure, GCP), Windows/Linux systems, and modern identity platforms.
Familiarity with the payments/fintech regulatory environment, including working knowledge of PCI‑DSS.
Excellent communication skills, with a proven ability to brief executive leadership, legal, and compliance teams during high‑pressure situations.

Preferred Certifications:

GIAC Certified Forensic Analyst (GCFA)
GIAC Certified Incident Handler (GCIH)
GIAC Network Forensic Analyst (GNFA)
GIAC Cyber Threat Intelligence (GCTI)
Offensive Security Certified Professional (OSCP)
Offensive Security Incident Response (OSIR)
CompTIA CySA+

Salary Range: $175,000- $235,000

Pay within this range varies by work location and on job-related knowledge, skills, and experience. We look forward to discussing your salary expectations and our full total rewards offerings throughout the interview process.

What we offer:

We offer a comprehensive benefits package that enables our teams to live a life well lived, both personally and professionally. Some of our perks include: