Head of Security Operations & Threat Response

ECS Corporate Services; Fairfax (VA); Remote; USD 180,000 - 250,000; Full time

Job summary

Everforth ECS is seeking a Director of Security Operations to lead the people, processes, and operational disciplines that support our managed cybersecurity services for commercial, government, defense, and intelligence customers. This senior leader will oversee security monitoring, threat detection, investigation, incident response, and continuous improvement across customer and enterprise environments.

The Director will mentor SOC analysts and detection engineers, partner with Security

Qualifications

• 15+ years of experience in cybersecurity, security operations, incident response, detection engineering, threat intelligence, or a related discipline.
• 5+ years of experience leading cybersecurity or security operations teams.
• Preference for applicants who have led large SOC, MDR, or multi-customer security operations teams at Director level or above.
• Deep understanding of SOC operations: monitoring, alert triage, investigation, escalation, incident response, threat hunting, continuous improvement.
• Proven ability to lead complex security incidents coordinating technical, business, customer, and executive stakeholders.
• Strong knowledge of detection engineering, including use-case development, validation, tuning, and MITRE ATT&CK mapping.
• Experience integrating cyber threat intelligence into detection, hunting, and response activities.
• Strong operational understanding of SIEM, EDR/XDR, identity, network, cloud, and other telemetry for detection and investigation.

Responsibilities

• Lead, develop, and mentor a high-performing team of SOC analysts, detection engineers, red team operators, cyber threat intelligence analysts, and exposure management analysts.
• Define the security operations strategy, operating standards, service model, and capability roadmap.
• Oversee day-to-day monitoring, alert triage, investigation, escalation, and response activities across customer and enterprise environments.
• Serve as the senior operational leader during major security incidents, coordinating investigation, containment, recovery, and executive and customer communications.
• Lead the detection engineering program, including development, validation, tuning, coverage assessment, and lifecycle management.
• Integrate cyber threat intelligence and threat hunting into SOC operations to improve detection and context.
• Establish standards for alert analysis, case documentation, escalation quality, QA, and operational reporting.
• Identify and implement practical applications of AI across security operations to accelerate triage and investigation, and improve service scalability with human oversight.
• Develop and maintain operating procedures, investigation playbooks, escalation criteria, and incident response processes.
• Work with customers and enterprise stakeholders to understand priorities, communicate risk, and resolve service concerns.
• Partner with Security Engineering and IT to ensure telemetry and automation support SOC requirements.
• Manage priorities, staffing, hiring, performance, on-call coverage, and service delivery risk.
• Support solution development, operational proposals, service transitions, and strategic customer engagements.

Skills

Security operations leadership

Threat detection

Incident response

Threat hunting

SOC analytics

Detection engineering

Executive communication

Risk management

Tools

SIEM

EDR/XDR

Threat intelligence platforms

Cloud security

Job description

Everforth ECS is seeking a Director of Security Operations to lead the people, processes, and operational disciplines that support our managed cybersecurity services for commercial, government, defense, and intelligence customers. This senior leader will oversee security monitoring, threat detection, investigation, incident response, and continuous improvement across customer and enterprise environments.

The Director will mentor SOC analysts and detection engineers, partner with Security