Senior Director, Security Operations — Remote

ecsfederal; Virginia (MN); Hybrid; USD 180,000 - 250,000; Full time

Job summary

Everforth ECS is seeking a Director of Security Operations to lead SOC analysts and detection engineers in a remote capacity. You will define security operations strategy, supervise monitoring and incident response, and coordinate with executives and customers to deliver secure outcomes.

The role demands 15+ years in cybersecurity with 5+ years leading security operations teams. Expect hands-on oversight of SIEM/EDR/XDR, threat hunting, and governance across enterprise and customer environments.

Qualifications

• 15+ years of experience in cybersecurity, security operations, incident response, detection engineering, threat intelligence, or related discipline.
• 5+ years leading cybersecurity or security operations teams, preferably large SOC/MDR multi-customer operations.
• Deep understanding of SOC operations including monitoring, alert triage, investigation, escalation, and continuous improvement.
• Experience leading complex security incidents coordinating technical, business, customer, and executive stakeholders.
• Strong knowledge of detection engineering practices: use-case development, tuning, coverage, MITRE ATT&CK mapping.
• Experience integrating cyber threat intelligence into detection, hunting, investigation, and response activities.
• Strong operational understanding of SIEM, EDR/XDR, identity, network, cloud telemetry used for detection and investigation.
• Experience establishing SOC procedures, playbooks, escalation criteria, and governance.

Responsibilities

• Lead and mentor SOC analysts, detection engineers, red team operators, threat intel analysts, and exposure management analysts.
• Define security operations strategy, operating standards, service model, and capability roadmap.
• Oversee day-to-day monitoring, alert triage, investigation, escalation, and response activities across customer and enterprise environments.
• Serve as the senior operational leader during major security incidents, coordinating investigation, containment, and communications.
• Lead the detection engineering program: development, validation, tuning, coverage analysis, and lifecycle management.
• Integrate threat intelligence and threat hunting into SOC operations to improve detection and context.
• Establish standards for alert analysis, case documentation, escalation quality, QA, and reporting.
• Develop and maintain playbooks, incident response processes, and escalation criteria.

Skills

Security operations

Incident response

Threat intelligence

Detection engineering

Threat hunting

MITRE ATT&CK

SIEM

EDR/XDR

Tools

SIEM

EDR/XDR

Job description

Everforth ECS is seeking a Director of Security Operations to lead SOC analysts and detection engineers in a remote capacity. You will define security operations strategy, supervise monitoring and incident response, and coordinate with executives and customers to deliver secure outcomes.

The role demands 15+ years in cybersecurity with 5+ years leading security operations teams. Expect hands-on oversight of SIEM/EDR/XDR, threat hunting, and governance across enterprise and customer environments.