Director, Security Operations & Incident Response

Overview

A Brief Overview: Director of Threat Management is a key leadership position focused on protecting RGA's digital ecosystem. This role requires a leader with deep technical expertise, a solid understanding of threats tactics, tooling, and procedures, as well as defensive security methodologies. The Director will manage a team of Threat Engineers focused on threat detection, threat emulation, threat intelligence, and incident response. This role will collaborate with Incident Response, Threat Management, and other security teams, as well as cross functional teams.

Responsibilities

• Lead and mentor a global team of threat engineers focused on one or more of the following disciplines: threat detection, threat emulation, threat intelligence, and incident response.
• Supervise all aspects of the team including hiring, training, evaluating, and coaching.
• Foster a culture of technical excellence, collaboration, and continuous improvement.
• Manage team training, development, and staffing to ensure readiness for current and emerging threats.
• Lead threat engineering efforts that develop, deploy, and operate tools and services that enable the teams ability to detect and respond to cybersecurity threats.
• Collaborate with other Threat Management teams to ensure alignment with strategic objectives and to drive operational effectiveness.
• Provide detailed technical insights and recommendations to security leadership.
• Develop and report metrics for reporting at an organizational, company, and/or executive level.

Qualifications

• Bachelor's Degree in Arts/Sciences (BA/BS) in cybersecurity, computer science, or a related field required.
• Advanced degree or specialized security certifications preferred.
• 7+ years of experience in enterprise security, with a strong focus in one or more of the following disciplines: threat detection, threat emulation, threat intelligence, and incident response.
• 3+ years of team leadership experience in technical security operations and threat engineering.
• Hands on experience with security tools such as SIEM, threat detection platforms, threat emulation, threat intelligence platforms, and advanced analytics.
• Proven track record of building and improving detection capabilities in complex organizations.
• Experience managing a global team of engineers and fostering cross time zone collaboration.
• Advanced knowledge of threat detection technologies and methodologies.
• Deep understanding of attacker tactics, tools, and techniques.
• Windows, Mac, and Linux internals.
• Cloud Computing (AWS, Azure, GCP).
• M365 Suite and Environments.
• Microsoft Domain Environments.
• IAM/AAA technologies and architectures (Active Directory, Okta, OpenID, SAML, OAuth, JWT).
• Physical and Virtual Networking technologies and architecture.
• SIEM/SOAR technology (Splunk, CrowdStrike, Sentinel, etc).
• EDR Platforms (CrowdStrike, Microsoft Defender, etc).
• Offensive Security Tools.
• Relevant certifications such as CISSP, GCIA, SANS Certifications, or equivalent credentials.

Benefits

• Gain valuable knowledge from and experience with diverse, caring colleagues around the world.
• Enjoy a respectful, welcoming environment that fosters individuality and encourages pioneering thought.
• Join the bright and creative minds of RGA, and experience vast, endless career potential.