This position will be fully remote and can be hired anywhere in the continental U.S.
The Director, Security Engineering is responsible for the service delivery and engineering of the SIEM, EDR, SOAR, and other security platforms supporting Optiv's Managed Security Services (MSS) and Advanced Fusion Center (AFC) delivery models. The role owns the engineering function behind Managed Detection and Response (MDR), co-managed SIEM, data engineering, and Tier 1 (engineering triage) offerings from a technical perspective. This is a high-visibility leadership role that provides practice management, leadership, strategy, offer management, and sales enablement, and directs high-priority initiatives while ensuring adherence to quality standards and SLOs. The Director is accountable for metrics demonstrating continuous improvement and efficiency in the client operational experience, for maturing platform and detection engineering processes, and for driving scale through automation and orchestration. The position mentors and develops people leaders and engineers and works cross-functionally to resolve key client challenges.
How you'll make an impact- Lead the security engineering practice across the SIEM, EDR, SOAR, and other security platforms, providing operational and strategic planning, fostering innovation, and organizing and negotiating the allocation of resources across the MSS and AFC portfolio.
- Own the technical direction and quality of MDR, co-managed SIEM, data engineering, and Tier 1 (engineering triage) offerings, including platform architecture, detection engineering standards, data-pipeline design, and SOAR orchestration.
- Establish and drive process, documentation, and detection-content improvement; deliver metrics showing continuous improvement and efficiency in the client operational experience and adherence to SLOs.
- Provide practice management, offer management, and sales enablement, partnering on scoping, proposals, and offer development, and direct high-priority initiatives while ensuring quality standards are met.
- Enforce all policies and procedures, including those for security, change management, standards, and service provision; serve as an executive escalation point for platform and service delivery concerns.
- Own accountability for the efficiency, value, and quality of the services the practice delivers, ensuring engineering leaders drive continuous improvement in cost, outcomes, and client experience.
- Manage the financial aspects of the function, including input to purchasing, budgeting, and vendor/tooling decisions.
- Manage staffing, including recruitment, supervision, scheduling, development, evaluation, and disciplinary actions; perform annual staff appraisals and develop staff through training and performance management.
- Stay abreast of evolving risks, platform capabilities, and vendor roadmaps; represent Optiv with clients, partners, and industry peers to inform engineering and operations processes.
- Establish and maintain regular communications with executives, other group leaders, and clients on stewardship calls and escalations.
- This list is not designed to be all-inclusive. Other duties and responsibilities may be assigned as needed.
- Leads the security engineering practice through Senior Managers and Managers. Accountable for organizational staffing, recruitment, development, performance management, budget, and disciplinary actions across the function.
What we're looking for- Bachelor's Degree from a four-year college or university in a related field, or equivalent work experience; Master's Degree in a related field preferred.
- Advanced security and/or leadership certifications (e.g., CISSP, CISM) and relevant security platform vendor certifications preferred.
- 10 or more years of information security and professional/managed services experience required.
- Demonstrated leadership of security engineering, SOC platform, or MSS delivery teams, including leadership of people managers, required.
- Strong information security and platform engineering experience across SIEM, EDR, SOAR, and additional security platforms such as Wiz and Cribl required.
- Experience with practice management, offer/sales enablement, and delivering managed security services engagements required.
- Experience driving scale through security automation and orchestration technologies preferred.
- Must be able to participate in scheduled and on-call/after-hours support, maintenance windows, and escalations across a 24x7x365 service.
- Occasional travel (typically less than 15%) may be required for client, team, or vendor engagements.
- Ability to read, analyze, and interpret technical documentation, statements of work, and service-level reporting.
- Ability to write clear runbooks, standard operating procedures, and executive-level communications.
- Ability to effectively present technical and service information to both technical staff and non-technical client stakeholders.
#LI-KG1
