Remote Director, Security Operations & Incident Leadership

ECS Corporate Services; Fairfax (VA); On-site; USD 180,000 - 250,000; Full time

Job summary

Everforth ECS is seeking a Director of Security Operations to lead a distributed SOC team responsible for monitoring, detection, and incident response across commercial, government, and defense customers. This remote leadership role requires deep expertise in SIEM, EDR/XDR, threat intelligence, and incident coordination.

You will define strategy, develop playbooks, drive AI-enabled automation, and communicate risk to executives and customers while partnering with Security Engineering and IT to

Qualifications

• 15+ years of experience in cybersecurity or security operations.
• 5+ years leading cybersecurity security operations teams.
• Experience leading SOC/MDR at Director level or above.
• Strong knowledge of SOC operations and threat hunting.

Responsibilities

• Lead, develop, and mentor a high-performing SOC team.
• Define the security operations strategy, standards, and capability roadmap.
• Oversee day-to-day monitoring, alert triage, investigations, escalation, and response.
• Lead major security incidents with coordination of containment, recovery, and communications.
• Drive detection engineering, validation, tuning, and lifecycle management.
• Integrate threat intelligence and threat hunting into SOC operations.
• Establish standards for alert analysis, case documentation, escalation, and reporting.
• Explore AI applications to accelerate triage and automate workflows with human oversight.
• Develop and maintain incident response playbooks and procedures.
• Collaborate with customers and stakeholders to align priorities and communicate risk.
• Partner with Security Engineering and IT to ensure telemetry and automation support SOC needs.
• Manage staffing, hiring, on-call coverage, and service delivery risk.

Skills

SOC leadership

Incident response

Threat intelligence integration

Detection engineering

SIEM/EDR/XDR expertise

Team mentoring

Communication skills

Tools

SIEM

EDR/XDR

Threat intelligence platforms

Job description

Everforth ECS is seeking a Director of Security Operations to lead a distributed SOC team responsible for monitoring, detection, and incident response across commercial, government, and defense customers. This remote leadership role requires deep expertise in SIEM, EDR/XDR, threat intelligence, and incident coordination.

You will define strategy, develop playbooks, drive AI-enabled automation, and communicate risk to executives and customers while partnering with Security Engineering and IT to