Founding SOC Leader: Detection, IR & Cloud Security

gomotive; United States; Remote; USD 140,000 - 200,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

401(k) contributions

Disability & life insurance

Paid time off & sick leave

Job summary

gomotive is seeking a founding security leader to build and run a modern SOC for a multi-product technology organization serving diverse sectors in the United States. You will own the end-to-end detection and response across production cloud and corporate IT, with a vision of a small, senior, automation-driven team rather than a traditional analyst model.

You’ll stand up a scalable SOC, define detection strategy linked to MITRE ATT&CK, and lead 24/7 incident response as incident commander while

Qualifications

• Senior leadership experience building or transforming a SOC with hands-on detection engineering
• Experience with SIEM/EDR/SOAR and cloud telemetry
• Cloud and container security monitoring; AWS and Kubernetes preferred
• Identity-centric attack paths across SaaS and cloud
• Incident command experience with executive communication
• Demonstrated AI/automation use in security operations

Responsibilities

• Stand up and scale the SOC with operating model, runbooks, escalation paths, hiring plans, and 24/7 coverage model
• Define and own the detection strategy end-to-end mapped to MITRE ATT&CK and internal threat model
• Lead 24/7 incident response as incident commander and communicate with executives
• Own the security telemetry and analytics platform, including data collection, normalization, enrichment, retention, and cost control
• Build a hypothesis-driven threat hunting program and a tailored threat intel function
• Partner with Platform Engineering to extend detection into production and cloud workloads

Skills

Leadership

Detection engineering

Incident command

AI/automation in SecOps

Tools

SIEM

EDR

SOAR

Cloud telemetry

AWS

Kubernetes

Job description

gomotive is seeking a founding security leader to build and run a modern SOC for a multi-product technology organization serving diverse sectors in the United States. You will own the end-to-end detection and response across production cloud and corporate IT, with a vision of a small, senior, automation-driven team rather than a traditional analyst model.

You’ll stand up a scalable SOC, define detection strategy linked to MITRE ATT&CK, and lead 24/7 incident response as incident commander while