The Director of SOC Engineering leads the SOC Engineering function with responsibility for the ownership, administration, reliability, and strategic roadmap of enterprise security monitoring, telemetry, detection, and automation services. This role manages a team of engineers responsible for the platforms and capabilities that support security operations, including monitoring, threat detection, incident response, and cyber resilience.
The position will provide strategic and technical leadership for the security monitoring technology stack, including SIEM, SOAR, EDR/XDR, telemetry pipelines, observability, and automation platforms. This role is accountable for platform ownership, service reliability, administration, lifecycle management, and roadmap development, ensuring capabilities are scalable, resilient, and aligned to the needs of Security Operations.
The Director drives continuous improvement of telemetry collection, data quality, automation, and platform integrations while establishing engineering standards and operational practices that enhance detection effectiveness, operational efficiency, incident response outcomes, and overall cyber resilience.
Principle Duties- Lead the strategy, roadmap, and maturity of SOC Engineering services, including SIEM, SOAR, EDR/XDR, telemetry pipelines, observability, and automation platforms.
- Own the administration, reliability, lifecycle management, and continuous improvement of enterprise security monitoring and telemetry platforms across cloud, on-premises, and hybrid environments.
- Ensure platform and service performance meet established availability, resiliency, scalability, security, and operational support objectives.
- Provide strategic and tactical leadership for platform engineering, telemetry services, observability, automation, and detection platform capabilities that support Security Operations.
- Establish engineering standards, operational processes, and service management practices necessary for effective and sustainable service delivery.
- Drive platform modernization, optimization, and automation initiatives that improve operational efficiency, service quality, visibility, and cyber resilience.
- Develop and manage technology roadmaps, budgets, vendor relationships, licensing strategies, and investment priorities aligned to business and security objectives.
- Partner with Security Operations and enterprise technology teams to integrate monitoring, telemetry, and observability capabilities across the organization.
- Establish service metrics, operational health measures, and performance indicators to drive accountability, continuous improvement, and business value.
- Build, develop, and retain a high-performing engineering organization through workforce planning, talent development, succession planning, and a culture of operational excellence, innovation, and continuous improvement.
- Provide engineering leadership during major incidents, resiliency exercises, audits, and strategic initiatives while driving long-term corrective actions and platform enhancements.
- Perform other duties as assigned.
Education - Bachelor's Degree in Arts/Sciences (BA/BS) or equivalent experience - Required
- Master's Degree in Arts/Sciences (MA/MS), MBA, or relevant advanced technical or leadership certification - Preferred
Work Experience- 10+ years of IT infrastructure engineering, cybersecurity engineering, platform engineering, or related experience required, with significant experience supporting security monitoring, telemetry, detection engineering, or security platform operations - Required
- 2+ years of IT management experience - Required
- 5+ years of progressive experience leading, designing, delivering, and operating complex cybersecurity, infrastructure, platform engineering, or enterprise technology functions - Preferred
Skills and Abilities- Demonstrated experience building and executing technology roadmaps, operational maturity programs, and large-scale platform modernization initiatives - Required
- Highly advanced people management skills, including the ability to lead, mentor, develop, and retain high-performing engineering teams - Required
- Strong understanding of security operations, threat detection, incident response, platform reliability, service management, and operational support models - Required
- Technical expertise with SIEM, telemetry, XDR/EDR, SOAR, cloud-native logging technologies, and related telemetry ecosystems preferred - Required
- Advanced knowledge of cloud technologies, enterprise infrastructure, identity services, APIs, automation technologies, and modern security architectures - Preferred
- Strong oral and written communication skills with the ability to convey technical concepts in business terms and effectively influence leadership decisions - Required
- Advanced project management skills, including the ability to evaluate project objectives, prioritize work efforts, schedule resources, manage budgets, and deliver strategic outcomes - Preferred
- Ability to work effectively within a collaborative leadership environment while managing multiple priorities, services, and strategic initiatives simultaneously - Required
- Advanced customer relationship management, stakeholder engagement, organizational leadership, and change management skills - Required
- Experience managing vendor relationships, technology evaluations, contract negotiations, licensing strategies, and strategic platform investments - Preferred
- Insurance or financial services industry knowledge - Preferred
#LI-CW1
#LI-Remote
Compensation Range:$126,710.00 - $188,840.00 Annual
Base pay varies depending on job-related knowledge, skills, experience and market location. In addition, RGA provides an annual bonus plan that includes all roles and some positions are eligible for participation in our long-term equity incentive plan. RGA also maintains a full range of health, retirement, and other employee benefits.
