Director, Threat Detection & Security Operations

Aurora Innovation Inc.; Mountain View, Pittsburgh, Seattle (CA, Allegheny County, WA); On-site; USD 247,000 - 396,000; Full time

Job summary

Aurora Innovation Inc. in Mountain View, CA seeks a Director of Security Operations & Detection Engineering to lead and unify the Detection & Response (D&R) and Security Operations Center (SOC) functions within the Technical Assurance division.

You will own the strategy, roadmap, and operating rigor for detection, triage, and response across Onboard vehicles, Cloud, and Enterprise environments, including leadership of engineers and analysts.

Qualifications

• 15+ years of progressive cybersecurity experience with leadership in detection engineering and SOC.
• Hands-on experience guiding detection engineering, threat hunting, or incident response.
• Expertise with SIEM, EDR, NDR/SOAR and modern detection/response tooling.
• Strong knowledge of cloud-native environments (AWS, Kubernetes) and enterprise security.
• Deep understanding of MITRE ATT&CK, NIST CSF and adversarial techniques.
• Experience with vulnerability management and remediation across teams.
• Proven ability to build a metrics program and deliver actionable insights.

Responsibilities

• Lead D&R and SOC teams, including engineers and analysts across detection engineering and incident response.
• Define multi-year strategy, roadmaps, and operating rigor for detection and security operations.
• Oversee 24x7 staffing, on-call rotations, and cross-time-zone coverage.
• Represent cyber defense to executives and coordinate audits and incidents.
• Drive data-driven improvements with KPIs, telemetry, and alert fidelity.

Skills

Threat hunting

Incident response

Security architecture

Python

C++

Zero Trust Architecture

DevSecOps

Cloud security

SIEM

EDR

NDR

Tools

AWS

Kubernetes

Linux

macOS

Windows

Snowflake

SQL

Python

Job description

Aurora Innovation Inc. in Mountain View, CA seeks a Director of Security Operations & Detection Engineering to lead and unify the Detection & Response (D&R) and Security Operations Center (SOC) functions within the Technical Assurance division.

You will own the strategy, roadmap, and operating rigor for detection, triage, and response across Onboard vehicles, Cloud, and Enterprise environments, including leadership of engineers and analysts.