Manager of Global Cyber Defense

Leads global Security Operations and Incident Response, shaping SOC architecture, cyber defense strategy, automation, and threat mitigation across enterprise and cloud environments. The role requires deep defensive security expertise, technical team leadership, and strong executive communication.

About the job

Responsibilities

Recruit, mentor, and develop a high-performing global team of cyber defense engineers and security analysts.
Author and maintain enterprise-wide cyber defense frameworks, incident response playbooks, and operational blueprints.
Own the strategic architecture, tooling, and day-to-day operations of a modern Security Operations Center (SOC).
Oversee the identification, containment, and remediation of advanced cyber attacks and vulnerabilities.
Evaluate, select, and integrate security technologies, with a focus on automation, SOAR, telemetry, and SIEM optimization.
Lead threat modeling, breach simulations, and tabletop exercises across Engineering, Cloud Infrastructure, and IT.
Partner with internal learning teams to institutionalize security playbooks and upskill teams across the organization.
Establish, track, and report high-impact cyber defense KPIs to executive leadership.
Manage the Cyber Defense roadmap within an agile engineering framework.

Requirements

Proven experience mitigating advanced persistent threats (APTs) and sophisticated cyber adversaries.
In-depth knowledge of SOC design, including logging strategies, network segmentation, cloud telemetry, and honeypots.
Strong technical understanding of securing enterprise SaaS platforms and cloud environments, including AWS, Azure, or GCP.
Demonstrated ability to build, automate, and orchestrate incident response workflows.
Strong working knowledge of security risk management and threat frameworks such as NIST CSF and MITRE ATT&CK.
Bachelor's degree in Computer Science, STEM, or equivalent real-world technical experience.
Proven ability to manage technical teams and high-pressure situations while exceeding operational goals.
Exceptional English communication skills and confidence presenting data-driven security metrics to the CISO and executive board.

Preferred Qualifications

Hands-on experience in both offensive security, including red teaming and penetration testing, and defensive security.
Familiarity with data analytics, SIEM engineering, or process-oriented workflows for optimizing security operations.
Relevant certifications such as CISSP, CISM, or GIAC.
Experience managing and securing global enterprise endpoint fleets.

Compensation and Benefits

Restricted Stock Units (RSUs) and merit-based refresh grants for full-time employees.
Paid parental leave of 24 weeks for primary carers and 12 weeks for supporting carers.
Flexible hybrid work model and paid time off.
Learning and development programs, mentorship, and access to a dedicated learning platform.
Subsidized Wellhub memberships, mental health counseling, and wellness programs.
Paid volunteer time through annual Impact Days.
Inclusion and belonging programs.

Skills

Security Operations Center, Incident Response, SIEM, AWS, Microsoft Azure, GCP, Nist Csf, Mitre Att&Ck, Threat Modeling, Penetration Testing, Red Teaming, Endpoint Security, Network Segmentation, Cloud Telemetry