Security Operations & Detection Engineering Director

Aurora; Pittsburgh (Allegheny County); Hybrid; USD 223,000 - 323,000; Full time

Job summary

Aurora is seeking a Director of Security Operations & Detection Engineering to lead and unify Detection & Response and SOC functions within our Technical Assurance division. You will own the strategy, roadmap and operating rigor across Onboard, Cloud, and Enterprise environments.

You will shape end-to-end incident response, vulnerability management, and security tooling, while reporting metrics to executives and partnering across engineering and security teams.

Qualifications

• 15+ years in cybersecurity with leadership of detection engineering and SOC
• Hands-on experience guiding detection strategy and defending against threats
• Knowledge of SIEM, EDR, NDR/SOAR, and cloud-native environments (AWS, Kubernetes)
• Experience with MITRE ATT&CK, NIST CSF, and modern adversarial techniques
• End-to-end incident management and cross‑functional collaboration

Responsibilities

• Lead D&R and SOC teams across detection engineering, incident response and 24x7 monitoring
• Define multi-year strategy for detection engineering, threat hunting and incident response
• Oversee vulnerabilities cloud, on-vehicle and enterprise; triage findings by severity and assign owners
• Build and report KPI and telemetry coverage to executives
• Represent cybersecurity incidents in executive settings and audits

Skills

Detection engineering

Incident response

Security operations leadership

Python

C++

Cloud security

Threat hunting

MITRE ATT&CK

NIST CSF

Zero Trust

DevSecOps

CI/CD

eBPF

Tools

SIEM

EDR

NDR/SOAR

Snowflake

SQL/Data warehousing

AWS

Kubernetes

Terraform

Git

auditd

sysmon

Python

Job description

Aurora is seeking a Director of Security Operations & Detection Engineering to lead and unify Detection & Response and SOC functions within our Technical Assurance division. You will own the strategy, roadmap and operating rigor across Onboard, Cloud, and Enterprise environments.

You will shape end-to-end incident response, vulnerability management, and security tooling, while reporting metrics to executives and partnering across engineering and security teams.