Technical Director, ISC — Lead Cyber Threat Ops

SANS Institute; United States; On-site; USD 175,000 - 200,000; Full time

Benefits offered by this job

Bonus opportunities

401(k) plan with company match

Health, dental, and vision plans

Job summary

SANS Institute is seeking a Technical Director, ISC to lead the mission-driven ISC operations and guide its next chapter. You will oversee day-to-day activities, steward the contributor community, and serve as a trusted public voice for practitioners, researchers, and organizations worldwide.

The role includes directing ISC infrastructure, collaborating on research, and publishing technical analyses. You will also represent ISC publicly as media contact and contribute to SANS newsletters and

Qualifications

• Demonstrated expertise in cybersecurity research, threat intelligence, or security operations.
• Experience mentoring student research and supervising faculty or technical professionals.
• Strong technical background in cybersecurity, including applied security research and incident response.
• Excellent written and verbal communication skills, including experience producing technical publications for professional audiences.
• Demonstrated leadership in the cybersecurity community through research, publications, presentations, or other recognized contributions.
• Must have unrestricted authorization to work in the USA, as no visa sponsoring is available.

Responsibilities

• Direct the operations and strategic development of the SANS Internet Storm Center (ISC).
• Oversee the infrastructure supporting ISC data collection, including honeypot networks and associated systems.
• Oversee and collaborate on research projects, which may involve working with SANS subject matter experts and SANS staff.
• Oversee the ISC website and supporting technical platforms.
• Guide the ongoing development and maintenance of honeypot software used by both the Internet Storm Center and institutional programs.
• Coordinate the daily publication schedule and contributions from ISC volunteer handlers.
• Oversee students interns for ISC from SANS.edu
• Produce technical analyses and content for ISC publications as needed.
• Serve as the primary media contact for the Internet Storm Center.
• Host or contribute to the Internet Storm Center Daily Podcast.
• Contribute technical content and analysis to SANS NewsBites and @Risk newsletters.
• Maintain vulnerability intelligence systems used to identify, prioritize, and communicate emerging cybersecurity threats.

Skills

Cybersecurity research

Threat intelligence

Security operations

Leadership

Technical communication

Job description

SANS Institute is seeking a Technical Director, ISC to lead the mission-driven ISC operations and guide its next chapter. You will oversee day-to-day activities, steward the contributor community, and serve as a trusted public voice for practitioners, researchers, and organizations worldwide.

The role includes directing ISC infrastructure, collaborating on research, and publishing technical analyses. You will also represent ISC publicly as media contact and contribute to SANS newsletters and