Director Security Operations

Everforth ECS is seeking a Director of Security Operations to work remotely.

At Everforth ECS, we solve complex cybersecurity and technology challenges for commercial, government, defense, and intelligence customers.

We are seeking a Director of Security Operations to lead the people, processes, and operational disciplines that support our managed cybersecurity services. This leader will be accountable for effective security monitoring, threat detection, investigation, incident response, and continuous improvement across customer and enterprise environments.

This is a senior operational leadership role that combines security operations strategy, people leadership, customer engagement, and hands-on oversight. The Director will lead SOC analysts and detection engineers and partner closely with Security Engineering, the Project Management Office, customer teams, and enterprise stakeholders to deliver consistent, high-quality security outcomes.

Responsibilities

• Lead, develop, and mentor a high-performing team of SOC analysts, detection engineers, red team operators, cyber threat intelligence anlaysts, and exposure management analysts.
• Define the security operations strategy, operating standards, service model, and capability roadmap.
• Oversee day-to-day monitoring, alert triage, investigation, escalation, and response activities across customer and enterprise environments.
• Serve as the senior operational leader during major security incidents, coordinating investigation, containment, recovery, and executive and customer communications.
• Lead the detection engineering program, including detection development, validation, tuning, coverage assessment, and lifecycle management.
• Integrate cyber threat intelligence and threat hunting into SOC operations to improve detection, investigative context, and proactive defense.
• Establish clear standards for alert analysis, case documentation, escalation quality, quality assurance, and operational reporting.
• Identify and implement practical applications of AI across security operations to accelerate triage and investigation, improve analytical quality, automate repeatable workflows, and enhance service scalability while maintaining appropriate human oversight.
• Develop and maintain operating procedures, investigation playbooks, escalation criteria, and incident response processes.
• Work directly with customers and enterprise stakeholders to understand priorities, communicate risk, explain operational decisions, and resolve service concerns.
• Partner with Security Engineering and IT teams to ensure security platforms, telemetry, integrations, and automation reliably support SOC requirements.
• Manage operational priorities, staffing, hiring, performance, professional development, on-call coverage, and service delivery risk.
• Support solution development, operational proposals, service transitions, and strategic customer engagements.

Salary Range: $180,000-$250,000

General Description of Benefit