Head of Security Operations & Incident Response

Advance-Auto-Parts; Raleigh (NC); Hybrid; USD 180,000 - 230,000; Full time

Job summary

Advance Auto Parts in Raleigh, NC seeks a Sr. Manager of Security Operations to lead the SOC, incident response, and threat hunting, ensuring rapid detection, containment, and remediation across the enterprise.

This senior leader will drive the security program roadmap, establish dashboards and KPIs, and coordinate with Legal, Privacy, and business leadership to strengthen resilience against ransomware, cloud threats, and insider risks.

Qualifications

• 10+ years of cybersecurity, incident response, and threat intelligence with a focus on operational excellence.
• Proven leadership in security architectures, security tools and controls, cloud, governance, or risk management.
• Experience with cybersecurity frameworks (NIST, ISO 27001, MITRE ATT&CK).

Responsibilities

• Lead and mature Advance Auto Parts' Security Operations Center (SOC) capabilities including 24x7 monitoring, triage, escalation, analysis, and response.
• Develop and execute the roadmap for security operations, detection engineering, threat hunting, and operational maturity.
• Establish and track service-level objectives, KPIs, and operational metrics.
• Drive continuous improvement of security operations processes, procedures, workflows, and automation.
• Own the enterprise Cybersecurity Incident Response Program and serve as Incident Commander during high-severity events.

Skills

Leadership

Security Operations

Incident Response

Threat Intelligence

MITRE ATT&CK

SIEM

SOAR

EDR

Cloud Security

Risk Management

Tools

SIEM

SOAR

EDR

Vulnerability Management

Cloud Security Tools

Job description

Advance Auto Parts in Raleigh, NC seeks a Sr. Manager of Security Operations to lead the SOC, incident response, and threat hunting, ensuring rapid detection, containment, and remediation across the enterprise.

This senior leader will drive the security program roadmap, establish dashboards and KPIs, and coordinate with Legal, Privacy, and business leadership to strengthen resilience against ransomware, cloud threats, and insider risks.