Global Threat Management Director — 24x7 Security Operations

Ecolab; Naperville (IL); Remote; USD 168,000 - 253,000; Full time

Job summary

Ecolab is seeking a Director of Threat Management to lead the enterprise detection and response function across a global Fortune 500 environment. You will own the reactive side of security, identifying, investigating, and containing threats while guiding the SOC, CTI, detection engineering, and incident response teams.

This role directs a 24x7 monitoring and response operation, advances the detection engineering pipeline, and drives measurable improvements in mean time to detect and respond,

Qualifications

• Bachelor’s degree or equivalent experience in a related discipline.
• 12+ years in cybersecurity, security operations, threat detection or incident response.
• 5+ years leading multi-team security functions at Senior Manager/Director level.
• Proven success in leading detection and response programs across SOC, detection engineering and TI.
• Experience managing large teams of analysts, engineers, and managers.

Responsibilities

• Define and own enterprise threat detection and response strategy and governance.
• Lead a 24x7 SOC with monitoring, triage, escalation, and initial investigation.
• Drive detection engineering across SIEM/telemetry and MITRE ATT&CK mapping.
• Lead Cyber Threat Intelligence and threat hunting priorities.
• Oversee incident response processes, playbooks, and post-incident reviews.
• Shape tooling roadmap with platform engineering and automation priorities.

Skills

Cybersecurity leadership

SOC operations

Threat detection

Incident response

MITRE ATT&CK

Education

Bachelor’s degree in Computer Science, Cybersecurity, IT, Engineering, or related

Tools

Elasticsearch

Splunk

Swimlane

Cortex XSOAR

Job description

Ecolab is seeking a Director of Threat Management to lead the enterprise detection and response function across a global Fortune 500 environment. You will own the reactive side of security, identifying, investigating, and containing threats while guiding the SOC, CTI, detection engineering, and incident response teams.

This role directs a 24x7 monitoring and response operation, advances the detection engineering pipeline, and drives measurable improvements in mean time to detect and respond,