Head of Proactive Cyber Defense Operations

GSK; Philadelphia (Philadelphia County); Sur place; USD 169 000 - 281 000; Plein temps

Avantages offerts par ce poste

Health care and other insurance

Retirement benefits

Paid holidays

Vacation

Paid caregiver/ parental and medical/p

Résumé du poste

GSK is seeking a Director of Proactive Defense Operations to own the security automation engine end to end. You will guide threat data into automated defensive actions, supervise a skilled team, and optimize the PDO tech stack, while aligning with enterprise risk and CSO governance.

This role emphasizes leadership across two pillars, collaboration with Detection Engineering, SecOps/IR and Vulnerability Management, and the use of AI tools within a responsible security framework.

Qualifications

• Bachelor’s degree or equivalent experience in cybersecurity, CS, IT, or related field.
• 12+ years of cyber security experience.
• Experience in security operations, detection engineering, or security data science.
• Experience with SIEM/SOAR platforms, telemetry pipelines, and detection rule frameworks such as YARA-L or Sigma.
• End-to-end ownership of a cyber security capability.
• Leadership or people management experience.

Responsabilités

• Own the Proactive Defense Operations capability end to end, including roadmap, delivery and service performance.
• Lead and develop the team, setting priorities and managing performance across both operational pillars.
• Own the capability budget and supplier and vendor relationships.
• Report capability performance and risk to CSO leadership and governance forums.
• Own the enterprise Priority Intelligence Requirements (PIR) framework, calibrating threat collection and automated triage to actual corporate risk.
• Direct machine-speed exposure triage and escalation, setting SLAs from threat identification to validated IR escalation or Proactive Operational Pack (POP) delivery.
• Govern the PDO technology stack (SIEM, security data lake, SOAR, Threat Intelligence Platform) and approve automation pipeline and API integration architecture.
• Own the RASCI interfaces with Detection Engineering, SecOps/IR and Vulnerability Management, ensuring PDO outputs are consumed rapidly and without rework.
• Build and maintain the metrics that show whether the Cyber Defense function is getting ahead of threat activity.
• Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and follow GSK’s Responsible AI, privacy and security requirements.

Connaissances

AI for Cybersecurity

Cloud Security

Cyber Threat Intelligence

Forensic Data Analysis

Incident Management

Infrastructure Security

Intrusion Detection

Intrusion Prevention

ML Security

Offensive Cyber Operations

Security Monitoring

Security Operations

Security Planning

Security Protocols

Security Risk

Security Technologies

Formation

Bachelor’s degree in cybersecurity, computer science, information technology, or related discipline

Outils

SIEM/SOAR platforms

Telemetry pipelines

Detection rule frameworks (YARA-L or Sigma)

Description du poste

GSK is seeking a Director of Proactive Defense Operations to own the security automation engine end to end. You will guide threat data into automated defensive actions, supervise a skilled team, and optimize the PDO tech stack, while aligning with enterprise risk and CSO governance.

This role emphasizes leadership across two pillars, collaboration with Detection Engineering, SecOps/IR and Vulnerability Management, and the use of AI tools within a responsible security framework.