Remote Director of Security Operations — Incident & Detection

Everforth, Inc.; United States; Remote; USD 180,000 - 250,000; Full time

Job summary

Everforth ECS seeks a Director of Security Operations to lead SOC analysts, detection engineers, and cyber threat intelligence teams in a remote, senior leadership role. You will define security operations strategy, maintain service delivery across customer and enterprise environments, and coordinate incident response with executive and customer stakeholders.

The role requires extensive experience in security operations, incident response, and threat intelligence, with a track record of building

Qualifications

• Senior leader responsible for security operations, incident response, and threat detection across multiple environments.

Responsibilities

• Lead SOC analysts, detection engineers, red team operators, threat intelligence analysts, and exposure management analysts.
• Define the security operations strategy, operating standards, service model, and capability roadmap.
• Oversee day-to-day monitoring, alert triage, investigation, escalation, and response activities.
• Coordinate major security incidents with executives, customers, and stakeholders.
• Lead detection engineering, production of detections, tuning, and coverage assessment.
• Integrate threat intelligence and threat hunting into SOC operations.
• Develop playbooks, escalation criteria, and incident response processes.
• Explore AI applications to accelerate triage, improve quality, and scale services.

Skills

SOC leadership

Incident response

Threat intelligence

Detection engineering

MITRE ATT&CK mapping

AI in security

SOAR platforms

Security operations

Customer engagement

Team mentorship

Tools

SIEM

EDR/XDR

SOAR

Job description

Everforth ECS seeks a Director of Security Operations to lead SOC analysts, detection engineers, and cyber threat intelligence teams in a remote, senior leadership role. You will define security operations strategy, maintain service delivery across customer and enterprise environments, and coordinate incident response with executive and customer stakeholders.

The role requires extensive experience in security operations, incident response, and threat intelligence, with a track record of building