Remote Director of Security Operations & Incident Response

National Debt Relief, LLC.; United States; Remote; USD 198,000 - 227,000; Full time

Benefits offered by this job

Medical, Dental, Vision benefits

401(k) with Company Match

Paid Holidays, Vacation, Sick Days

12 weeks Paid Parental Leave

Transit Benefits

Life Insurance

Wellness Program

Job summary

National Debt Relief seeks a Director of Security Operations to lead detection and response across the enterprise. You will own incident response, endpoint detection, email security, SIEM engineering, and automation.

The role combines hands-on leadership with strategic planning, budget ownership, and stakeholder reporting. You will drive multi-year roadmaps, build detections, and guide a team of analysts and engineers.

Qualifications

• 10+ years in information security, incl. 5+ years in security operations or detection engineering
• 5+ years direct people leadership, including hiring and performance management
• Experience owning a function budget, vendor relationships, and staffing plans
• Bachelor's degree or equivalent practical experience
• Certifications such as GCIH, GCIA, GCFA, CISSP, or CISM recommended

Responsibilities

• Lead detection and response strategy and multi-year roadmap aligned to risk and business priorities
• Coach and develop the security operations team, manage hiring, on-call rotation, and performance
• Act as incident commander, write detections, and perform hands-on analysis with the team
• Own end-to-end incident response program including IR plan and post-incident review
• Own EDR strategy, policy tuning, containment workflows, and threat hunting
• Own email security including phishing defense and DMARC/DKIM/SPF controls
• Own SIEM and detection engineering from log onboarding to alert quality and FP reduction
• Develop automation and runbooks to shorten response time
• Map threat-informed detection to MITRE ATT&CK and validate via purple team
• Report operational metrics and coordinate with stakeholders during incidents
• Manage budget, staffing, and vendor strategy for detection and response stack
• Present program status and risk decisions to executives and boards
• Support audits with evidence for monitoring and control operation

Skills

SIEM experience

EDR platforms

Phishing response

MITRE ATT&CK

Incident response

Cloud detection (AWS/Azure/GCP)

Python/PowerShell scripting

SOAR workflows

Education

Bachelor's degree in information systems or computer science

Tools

Okta/Entra ID

Log sources onboarding

Job description

National Debt Relief seeks a Director of Security Operations to lead detection and response across the enterprise. You will own incident response, endpoint detection, email security, SIEM engineering, and automation.

The role combines hands-on leadership with strategic planning, budget ownership, and stakeholder reporting. You will drive multi-year roadmaps, build detections, and guide a team of analysts and engineers.