Senior Director, Threat Detection & Incident Response

EPX; United States; Remote; USD 175,000 - 235,000; Full time

Benefits offered by this job

Medical, Dental, & Vision Coverage

401(k) + Match

Mental Health Support & Well-Being

Paid Parental Leave

Education Assistance

Lifestyle Spending Account

Job summary

North is seeking a Director of Threat Detection and Response to lead a highly technical security organization. You will define strategy, build capabilities across incident response, detection engineering, threat hunting, and cyber threat intelligence, and act as the escalation point for executives during critical incidents.

You will manage a senior team, drive log pipelines, and ensure rapid triage and remediation across cloud, network, endpoint, and identity security.

Qualifications

• Bachelor's degree or equivalent experience in CS/cyber security.
• 10+ years of hands-on information security with incident response, detection engineering and threat hunting.
• Proven leadership of complex security operations and high-performing technical teams.

Responsibilities

• Serve as senior incident commander for major, high-severity security incidents.
• Oversee incident response strategy: triage, containment, eradication, recovery across multiple layers.
• Lead threat hunting programs based on MITRE ATT&CK to uncover undetected compromises.
• Direct detection engineering to develop and tune high-fidelity detection logic.
• Mentor a team of incident responders, detection engineers and threat hunters.
• Translate technical findings into clear narratives for executives and board.

Skills

Incident Response

Threat Hunting

Detection Engineering

Executive Briefing

Team Leadership

MITRE ATT&CK

Cloud Security

PCI-DSS

Log Analysis

Education

Bachelor's degree in Computer Science, Cyber Security or related field

Relevant certifications (see GCFA, GCIH, GNFA, GCTI, OSCP, OSIR, CySA+)

Tools

SIEM platforms

Digital forensics tools

Log collection & data pipelines

Job description

North is seeking a Director of Threat Detection and Response to lead a highly technical security organization. You will define strategy, build capabilities across incident response, detection engineering, threat hunting, and cyber threat intelligence, and act as the escalation point for executives during critical incidents.

You will manage a senior team, drive log pipelines, and ensure rapid triage and remediation across cloud, network, endpoint, and identity security.