Director, Security Operations Enablement

Overview

In this role you will lead Security Operations enablement, focusing on data engineering, data analytics, and SIEM/SOAR engineering to support detection and response. You will manage a global engineering team, govern technology platforms, and drive a strategic roadmap aligned with cyber defense priorities. You will collaborate with Incident Response, GCDC, and Security Engineering to translate requirements into scalable, future-ready solutions. This is an opportunity to shape enterprise security capabilities at scale within a global insurance leader.

Responsibilities

• Own and lead Security Operations Enablement, covering Data Engineering, Data Analytics, and SIEM/SOAR engineering
• Define and deliver the strategic roadmap for Security Operations platforms and capabilities
• Manage and develop a global team of 20+ engineers
• Govern the lifecycle of Security Operations technologies (selection, implementation, optimization, decommissioning)
• Ensure availability and continuous improvement of data pipelines, detection engineering, and automation
• Partner with GCDC and Incident Response to translate operational requirements into technical solutions
• Collaborate with Security Engineering and Enterprise Architecture on target state architectures
• Promote modern engineering practices (infrastructure as code, CI/CD, scalable automation)
• Establish and maintain vendor relationships and ensure value realization from partners
• Define and track performance metrics for Security Operations technologies
• Lead governance, risk, and compliance activities for enablement platforms
• Contribute to tactical and strategic decisions within the Information Security Office
• Support innovation initiatives, including AI and automation within Security Operations

Key requirements

• 10+ years in Cyber Security Engineering, Security Operations, or related field
• Experience leading engineering teams delivering large-scale security platforms (SIEM, SOAR, data platforms)
• Strong understanding of Security Operations processes (detection, triage, response)
• Proven ability to define and execute technology strategy in complex, global organizations
• Experience managing distributed engineering teams
• Excellent stakeholder management and communication skills
• Strong analytical and problem-solving abilities with a data-driven approach
• Experience working with security vendors and managing strategic partnerships
• Ability to operate at both tactical and strategic levels
• Familiarity with cloud platforms, modern data architectures, and scalable engineering patterns

• stakeholder management
• communication
• analytical thinking
• Data Engineering
• Data Analytics
• SIEM

…