Senior Director, Security Operations & Incident Response

Gartner; Dolphin Cove (CT); Hybrid; USD 120,000 - 167,000; Full time

Benefits offered by this job

Hybrid work environment

Mentorship program

Leadership courses

401K with corporate match

Health, dental and vision insurance

Tuition reimbursement

Employee Stock Purchase Plan

Parental leave

Job summary

Gartner IT is seeking a Director of Security Operations to lead a geographically dispersed SOC across US time zones, driving incident response, detection content development, and automation. You will mentor teams, coordinate with stakeholders, and elevate operational excellence while safeguarding Gartner’s networks and data.

The role emphasizes hands-on leadership, collaboration with security teams, and continuous improvement in a fast-paced environment.

Qualifications

• Bachelor's in Computer Science, Information Security, Engineering, or 6+ years of experience in Information security
• Experience leading a SOC, Hunt, and/or Incident Response Team or progressive growth in responsibilities in a SOC environment
• Ability to prioritize and analyze security events to enable swift action and proportional responses
• Expertise in conducting and driving analysis and investigation of cybersecurity incidents
• Experience articulating technical findings and creating detailed incident reports
• Extensive experience in leveraging security tools such as SIEM, EDR, web proxy and email security tools
• Experience driving security projects from requirements gathering to completion
• Ability to mentor, motivate, and coach team members, leading to operational excellence
• Passion for security and solving tomorrow's problems
• Cloud experience (AWS, Azure, GCP)
• Scripting or programming experience (Python, PowerShell, Bash)

Responsibilities

• Drive operational excellence of a geographically dispersed Security Operations team
• Serve as the Incident Commander during the incident response process
• Continuously seek out opportunities to improve the team's ability to rapidly and effectively respond to security incidents
• Work with key business stakeholders to detect, respond to, and remediate security issues
• Provide mentorship and guidance to team members, promoting a culture of open communication, continuous improvement, and operational excellence
• Drive automation initiatives, enhancing analyst capabilities and workflows while eliminating monotonous tasks
• Develop innovative and cutting-edge detection content aligned with ATT&CK, Cyber Kill Chain, and various other cyber security frameworks
• Bring your own ideas and solutions to a fast-paced, growing, and evolving team centered around operational excellence
• Ensure smooth handover of alerts and incidents between team members located in various geographic locations

Job description

Gartner IT is seeking a Director of Security Operations to lead a geographically dispersed SOC across US time zones, driving incident response, detection content development, and automation. You will mentor teams, coordinate with stakeholders, and elevate operational excellence while safeguarding Gartner’s networks and data.

The role emphasizes hands-on leadership, collaboration with security teams, and continuous improvement in a fast-paced environment.