Kyndryl Holdings, Inc.

Director, Cyber Defense

Kyndryl Holdings, Inc.$200K — $375K *
Information Technology
11 - 15 years of experience
Job Overview by Ladders

Qualifications

  • 12+ years in cybersecurity operations, threat intelligence, or SOC leadership, including 5 years in senior roles.
  • Proven experience leading a cyber defense or security operations program for hybrid or multi-cloud environments.
  • Strong understanding of threat-informed defense and MITRE ATT&CK framework.
  • Solid grasp of detection engineering practices and continuous validation processes.
  • Demonstrated ability to lead and manage a globally distributed team with cultural awareness.
  • Exceptional communication skills for interfacing with technical teams and executive leadership.

Responsibilities

  • Lead 24/7 global security operations using a follow-the-sun model across multiple regions.
  • Own and manage the entire incident response lifecycle from triage to post-incident reviews.
  • Establish clear escalation authorities and protocols for cybersecurity incidents.
  • Lead the Cyber Threat Intelligence program and convert intelligence into actionable defenses.
  • Oversee ATT&CK-aligned detection coverage and continuous validation efforts.
  • Implement detection-as-code discipline within the detection lifecycle.
  • Drive operational metrics focused on enhancing the defender's detect-decide-act cycle.
  • Collaborate with AI-Driven Cyber Defense teams to integrate automation into operations.
  • Develop and nurture a globally diverse cybersecurity team.

Benefits

  • Opportunity to lead cutting-edge cyber defense operations at a global scale.
  • Engagement in a dynamic environment with real-time challenges from AI-accelerated adversaries.
  • Access to continuous learning and professional development opportunities within a diverse team.
  • Collaboration with top-tier professionals and thought leaders in cybersecurity.
Full Job Description
The Role

The Director, Cyber Defense, leads Kyndryl's operational defense mission across a globally distributed security organization. This role reports to the Vice President and Deputy CISO, Cyber Operations.

You will own the full incident response lifecycle, run follow-the-sun security operations across AMER, EMEA, and APAC, direct the cyber threat intelligence program, and drive the conversion of that intelligence into the detection coverage and defensive architecture that protect Kyndryl's global enterprise estate. You will set the engineering discipline that keeps detection content tested, version-controlled, and continuously validated against the adversary. During major security incidents, you will exercise cross-functional coordination authority to drive rapid, disciplined response. The window between vulnerability and exploit is compressing as adversaries adopt AI-accelerated tooling. This role exists to keep Kyndryl's defense ahead of that curve.

What You'll Do:
  • Lead 24/7 global security operations through a follow-the-sun model spanning AMER, EMEA, and APAC regions.
  • Own the full incident response lifecycle, triage through post-incident review, with forensic preservation standards maintained throughout.
  • Coordinate with the Incident Commander function with clear escalation authorities, runbooks, and cross-functional coordination protocols for cybersecurity incidents.
  • Direct the Cyber Threat Intelligence program and own the intelligence-to-defense loop: convert prioritized adversary intelligence into detection requirements, control coverage decisions, and changes to the defensive architecture.
  • Govern ATT&CK-aligned detection coverage on measured efficacy, and stand up continuous validation through adversary emulation and detection testing to prove that intelligence-driven defenses fire against the techniques they target.
  • Set detection-as-code discipline across the detection lifecycle: version-controlled content, release rigor, automated testing, and telemetry quality standards, executed jointly with the SIEM, SOAR, & Agent Development team that owns the underlying pipeline and platform.
  • Drive operational measurement toward compressing the defender's detect-decide-act cycle against AI-accelerated adversaries, not raw response speed alone.
  • Coordinate with Vulnerability Management on remediation prioritization and exploitability-informed sequencing. This role does not own the vulnerability management function.
  • Collaborate with the AI-Driven Cyber Defense team to integrate automation and ML into defensive operations.
  • Build and develop a globally diverse team, investing in their growth across technical, analytical, and leadership competencies.

What You Bring:
  • Proven ability to lead security operations and incident response at enterprise scale, with the composure and decision quality to perform under pressure.
  • Strong command of threat-informed defense: translating intelligence into detection coverage and architecture decisions, anchored in MITRE ATT&CK, with kill chain analysis as a supporting lens for mapping attacker progression.
  • Working command of detection engineering practice: detection-as-code, content lifecycle management, and validation discipline, partnering with platform engineering rather than operating in isolation from it.
  • Strong command of incident response methodologies and escalation processes.
  • A leadership style that builds operational discipline without stifling initiative. You want your team thinking, not just executing.
  • Experience running geographically distributed teams with the cultural awareness that global operations demand.
  • The ability to communicate effectively with technical teams and executive leadership alike.


Kyndryl currently does not require employees to be fully vaccinated against COVID-19, however, if you are hired to work at a client, customer, or partner location, you may be required to show proof of vaccination to align with their respective COVID-19 vaccination policies. Those who believe they are eligible may apply for a medical or religious accommodation prior to the start of employment.

Who You Are

Requirements:
  • 12+ years in cybersecurity operations, incident response, threat intelligence, or SOC leadership, with at least 5 years in a senior leadership role over a globally distributed team.
  • Demonstrated track record leading a cyber defense or security operations program at comparable scale and complexity, defending a hybrid or multi-cloud enterprise estate.
  • Experience operationalizing threat intelligence into detection coverage and defensive architecture, with familiarity in detection engineering and continuous validation practice.
  • Dedication to continuous learning through a combination of self-directed, certification, military, and formal education sources.

The compensation range for the position in the U.S. is $200,800 to $375,600 based on a full-time schedule. Your actual compensation may vary depending on your geography, job-related skills and experience. For part time roles, the compensation will be adjusted appropriately. The pay or salary range will not be below any applicable state, city or local minimum wage requirement.

About Kyndryl Holdings, Inc.

Kyndryl is an IT transformation services company. They offer network services, business resilience, and hybrid cloud solutions. Their services include applications, core enterprise and zcloud, the digital workplace, security and resiliency, cloud, data, and AI, network, and edge. They committed to the health and continuous improvement of the vital systems at the heart of the digital economy.

Kyndryl Holdings, Inc. Careers

Join the Pioneering Team at Kyndryl Holdings, Inc. At Kyndryl Holdings, Inc., we are at the forefront of technological innovation and service excellence, making this an ideal time to join our global team. As a leader in IT infrastructure services, we offer unparalleled job opportunities that propel your career to new heights. Work You’ll Do Embark on a career with Kyndryl Holdings, Inc. and be part of a team that transforms businesses and industries worldwide. Our professionals are not just part of a company; they are essential drivers of innovation and growth. With a commitment to leadership and diversity training, Kyndryl Holdings, Inc. stands out as a beacon of professional development and innovation in the tech industry. Our culture is built on the principles of open collaboration, leadership, and respect for diversity, ensuring a welcoming environment for all employees. Join our team and contribute to our mission of delivering high-quality solutions across various industries. At Kyndryl Holdings, Inc., your skills will be honed through challenging projects and a collaborative team environment. Innovative Work At Kyndryl Holdings, Inc., innovation isn't just a buzzword—it's the cornerstone of everything we do. With a focus on cutting-edge technology and industry expertise, our team is equipped to tackle some of the most critical challenges facing businesses today. Be Part of a Great Team Kyndryl Holdings, Inc. is not just about individual growth; it’s about collective success. The synergy of our team’s diverse skills leads to groundbreaking solutions and industry leadership. Our commitment to employee benefits and a supportive culture makes Kyndryl Holdings, Inc. a top choice for professionals seeking meaningful and rewarding careers. Future-Proof Your Career With Kyndryl Holdings, Inc., the path to professional advancement is clear. Our career development programs offer extensive training, certification support, and opportunities for growth, ensuring that your career trajectory is always upward. Explore Job Opportunities Whether you’re looking for a full-time position, an internship, or leadership roles, Kyndryl Holdings, Inc. offers a range of employment opportunities to match your career aspirations. Enhance your resume through hands-on experience that sets you apart in the job market. Kyndryl Holdings, Inc. Careers Network Stay connected with Kyndryl Holdings, Inc. through our dedicated careers network. Search open positions that align with your skills and interests. We are continuously hiring creative, curious, and motivated individuals who are ready to drive success in a dynamic work environment. Keep Up to Date Stay informed with the latest career tips, industry insights, and professional growth opportunities available at Kyndryl Holdings, Inc. Our careers blog provides valuable information to help you navigate your job search, prepare for interviews, and excel in your career. Job Alert Emails Customize your experience by subscribing to job alerts and insider tips tailored to your preferences. Discover the exciting and rewarding career opportunities waiting for you at Kyndryl Holdings, Inc. Join Kyndryl Holdings, Inc. today and be part of a team that values innovation, leadership, and a diverse skill set in driving technological advancements and business success.
Learn more about Kyndryl Holdings, Inc.
Market Cap
$2.5 billion
Industry
NASDAQ

Similar Jobs

More Jobs at Kyndryl Holdings, Inc.

More Information Technology Jobs

Find similar Director, Cyber Defense jobs: