Senior Enterprise Security Operations & Detection Lead

Jobtailor; Brea (CA); On-site; USD 170,000 - 250,000; Full time

Job summary

Jobtailor is seeking an experienced security leader to guide enterprise security operations, incident response, and detection engineering across cloud, endpoint, identity, and SaaS environments. You will manage SIEM/SOAR tools, coordinate MSSP/MDR partnerships, and drive measurable risk reduction and executive reporting.

The role requires communicating risks to executives, leading security teams, and maturing a SOC program within a complex, multi-business context.

Qualifications

• 7+ years in cybersecurity, security operations, detection engineering, incident response, or security engineering.
• 5+ years leading security operations, engineering, SOC, or incident response teams.
• Experience operating security capabilities across cloud, SaaS, endpoint, identity, and enterprise environments.

Responsibilities

• Lead enterprise security operations including monitoring, triage, investigation, escalation, and response.
• Oversee SOC and MSSP/MDR partnerships, including SLAs, alert quality, escalation paths, and performance metrics.
• Define KPIs/KRIs including MTTD, MTTR, alert fidelity, detection coverage, and response effectiveness.
• Own the incident response program, including playbooks, exercises, breach workflows, and communications.
• Lead major incidents through containment, eradication, recovery, and root cause analysis.
• Coordinate with Legal, Privacy, HR, IT, and Communications.

Skills

Incident Response

SIEM Management

Cloud Security

Detection Engineering

Automation

Risk Management

Zero Trust

Threat-Informed Detections

Leadership

Education

Bachelor's degree or equivalent

Tools

Microsoft Sentinel

Splunk

QRadar

Chronicle

Job description

Jobtailor is seeking an experienced security leader to guide enterprise security operations, incident response, and detection engineering across cloud, endpoint, identity, and SaaS environments. You will manage SIEM/SOAR tools, coordinate MSSP/MDR partnerships, and drive measurable risk reduction and executive reporting.

The role requires communicating risks to executives, leading security teams, and maturing a SOC program within a complex, multi-business context.