Global Director of Autonomous Cyber Defense and Security Event Triage (SOC)

Direct and mature a 24/7 global cyber operations model for security event monitoring, triage, incident response partnership, and threat hunting across multiple environments. Own functional strategy, multi-year roadmap, and KPI/OKR outcomes for autonomous cyber defense and security event triage, including MTTD/MTTR and false-positive reduction. Lead, mentor, and scale high-performing global teams while defining operating rhythms, coverage models, and escalation paths. Serve as the lead escalation contact in a 24/7 environment, guide appropriate resources to resolution, and oversee budget planning, vendor management, and financial governance for global cyber operations tooling. Drive AI/ML/LLM-enabled autonomous defense initiatives to improve alert quality and standardize decisioning. Establish governance for detection engineering, triage decisioning, and automation to reduce response gaps. Lead critical incident triage and escalation governance, partner with incident response and infrastructure teams to coordinate containment, and oversee third-party security service providers. Sponsor and execute a purple team program to validate detections through adversary emulation aligned to MITRE ATT&CK. Provide global operational leadership during cyber events by coordinating communications and technical execution across regions and time zones. Produce recurring and ad-hoc reporting on threats, trends, and program performance to support stakeholder decision-making.