Senior Director of Security Operations & Incident Response

BEREC Bellwether Enterprise Real Estate Capital, LLC

Washington Township (OH)

On-site

USD 150,000 - 210,000

Full time

14 days+

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Job summary

BEREC Bellwether Enterprise Real Estate Capital, LLC (BWE) seeks a Director of Security Operations to lead a three-person SecOps team, stay hands-on, and drive incident response, detection, and platform hardening across 600 users, 700 endpoints, and 30 offices.

You will own security engineering, governance, and risk management in a regulated commercial real estate finance environment, partnering with an MDR provider and aligning to NIST CSF and CIS Controls.

Qualifications

10+ years of cybersecurity experience with significant recent hands-on security engineering and operations responsibilities.
3+ years leading technical security professionals while continuing to contribute technically.
Hands-on depth across most of: EDR, cloud security, email security, data security, privileged access, SIEM and detection engineering, and vulnerability management.
Direct experience managing an MDR or MSSP and holding the provider accountable for measurable detection and response outcomes.
Experience serving as technical lead for security incidents from triage through remediation and post-incident review.
Experience implementing, operating, and evidencing technical security controls against financial services regulatory and contractual requirements.
Ability to automate security work using PowerShell, Python, APIs, or equivalent technologies.
Bachelor's degree in a related field or equivalent practical experience.

Responsibilities

Lead a three-person security team as an active technical contributor, setting standards and coaching.
Own security engineering: configure, tune, and troubleshoot the security stack for measurable coverage and controls.
Evaluate security tool portfolio for coverage, overlap, and cost; recommend consolidation or retirement.
Own detection and response outcomes, including alert quality, tuning, escalation, and vendor accountability.
Set detection, logging, and telemetry standards across cloud, SaaS, endpoint, identity, and data platforms.
Serve as security incident commander from triage through recovery and post-incident review, building and rehearsing playbooks.
Drive vulnerability management from discovery and prioritization through remediation and verification.
Set security architecture standards for cloud, SaaS, infrastructure, applications, and data; define security-by-design for new tech.
Implement and operate data protection controls for confidential financial information.