Senior Security Operations Leader - Detection & Response

Pearson; Springfield (IL); On-site; USD 180,000 - 260,000; Full time

Job summary

Pearson is seeking a Skip-Level Manager: Senior Director of Security Operations to lead the SOC, drive incident response, and advance detection engineering across Pearson environments. You will refine SOC processes, develop detection capabilities, and ensure alignment with Pearson security standards and regulatory requirements.

The role requires hands-on leadership in incident detection, containment, and root cause analysis, plus the ability to translate complex risk into actionable insights for

Qualifications

• Experience in regulated environments or government clients.
• 4+ years in security operations, incident response, and detection engineering.
• Hands-on expertise with SOAR, EDR, NDR, and SIEM technologies.
• Experience with one or more Cloud Service Providers (AWS, Azure, GCP).

Responsibilities

• Lead and execute advanced SOC operations, including incident detection, triage, containment, and root cause analysis with 24x7 coverage.
• Develop, implement, and optimize detection logic, playbooks, and automated response workflows.
• Continuously assess and enhance SOC processes and procedures.
• Collaborate with threat intelligence teams to analyze risks and integrate TTPs.
• Act as a trusted advisor to internal stakeholders and translate findings into insights.
• Ensure SOC activities comply with standards and Pearson policies.
• Deliver executive-level reporting and risk assessments.

Skills

Incident Response

Threat Detection

Cloud Security

Stakeholder Management

Automation

Multitasking

Communication

Tools

SOAR

EDR

NDR

SIEM

AWS

Azure

GCP

Job description

Pearson is seeking a Skip-Level Manager: Senior Director of Security Operations to lead the SOC, drive incident response, and advance detection engineering across Pearson environments. You will refine SOC processes, develop detection capabilities, and ensure alignment with Pearson security standards and regulatory requirements.

The role requires hands-on leadership in incident detection, containment, and root cause analysis, plus the ability to translate complex risk into actionable insights for