Remote Director, Security Operations & Incident Leadership

ECS; Virginia (MN); On-site; USD 180,000 - 250,000; Full time

Job summary

Everforth ECS is seeking a Director of Security Operations to lead a high-performing SOC team and drive security outcomes for customers and enterprise environments. This remote role focuses on people, processes, and operational excellence in managed security services.

You will oversee incident response, threat detection, and detection engineering, while integrating threat intelligence and AI to improve triage, analysis, and automation, delivering consistent, high-quality results.

Qualifications

• 15+ years in cybersecurity, security operations, incident response, detection engineering, threat intelligence, or related discipline.

Responsibilities

• Lead, develop, and mentor a high-performing team of SOC analysts, detection engineers, red team operators, cyber threat intelligence analysts, and exposure management analysts.
• Define the security operations strategy, operating standards, service model, and capability roadmap.
• Oversee day-to-day monitoring, alert triage, investigation, escalation, and response activities across customer and enterprise environments.
• Serve as the senior operational leader during major security incidents, coordinating investigation, containment, recovery, and executive and customer communications.
• Lead the detection engineering program, including detection development, validation, tuning, coverage assessment, and lifecycle management.
• Integrate cyber threat intelligence and threat hunting into SOC operations to improve detection, investigative context, and proactive defense.
• Establish clear standards for alert analysis, case documentation, escalation quality, quality assurance, and operational reporting.
• Identify and implement practical applications of AI across security operations to accelerate triage and investigation, improve analytical quality, automate repeatable workflows, and enhance service scalability while maintaining appropriate human oversight.
• Develop and maintain operating procedures, investigation playbooks, escalation criteria, and incident response processes.
• Work directly with customers and enterprise stakeholders to understand priorities, communicate risk, explain operational decisions, and resolve service concerns.
• Partner with Security Engineering and IT teams to ensure security platforms, telemetry, integrations, and automation reliably support SOC requirements.
• Manage operational priorities, staffing, hiring, performance, professional development, on-call coverage, and service delivery risk.
• Support solution development, operational proposals, service transitions, and strategic customer engagements.

Skills

Security Ops

Threat Detection

Incident Response

MITRE ATT&CK

Leadership

SOC Management

AI in Security

Customer Communication

Tools

SIEM

EDR/XDR

Job description

Everforth ECS is seeking a Director of Security Operations to lead a high-performing SOC team and drive security outcomes for customers and enterprise environments. This remote role focuses on people, processes, and operational excellence in managed security services.

You will oversee incident response, threat detection, and detection engineering, while integrating threat intelligence and AI to improve triage, analysis, and automation, delivering consistent, high-quality results.