Назад
Company hidden
2 дня назад

Director, Cyber Defense (Cybersecurity)

186 000 - 316 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
director
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Director, Cyber Defense (Cybersecurity): Building and operating MiniMed’s modern cyber defense capability across enterprise IT, cloud, identity, manufacturing and operational technology, applications, data, and connected-product ecosystems with an accent on 24x7 security operations, offensive security, automation, and governed AI agents. Focus on leading high-severity incident response, designing detection-as-code and runbook-as-code services, building a technically strong team, and standing up security capabilities through a standalone operating-model transition.

Location: Virtual, Minnesota, United States of America; other location: Virtual, Georgia, United States of America. Workplace type: Flexible.

Salary: USD 186,000–316,000 annually for U.S. locations excluding Puerto Rico; eligible for an annual long-term incentive plan.

Company

hirify.global is a full-stack insulin delivery company developing intelligent dosing systems and predictive diabetes-care solutions.

What you will do

  • Define and execute the cyber defense strategy, roadmap, and operating model across enterprise IT, cloud, identity, applications, data, manufacturing and OT, and connected-product services.
  • Own 24x7x365 security operations covering monitoring, detection engineering, threat intelligence, threat hunting, exposure-informed defense, incident response, digital forensics, crisis readiness, and MSSP/MDR performance.
  • Serve as senior incident commander for high-severity events and maintain evidence, escalation, recovery, and reporting mechanisms for executive, legal, privacy, regulatory, and disclosure decisions.
  • Lead offensive security, including penetration testing, red teaming, adversary emulation, purple teaming, attack-path analysis, social engineering, breach-and-attack simulation, and control validation.
  • Design automation-first, API-first, observable, measurable security services using detection-as-code, runbook-as-code, governed AI agents, and reusable integrations.
  • Build and lead the technical team while owning architecture, risk decisions, sensitive investigations, incident command, vendor governance, tooling rationalization, build-versus-buy decisions, capability sequencing, and transition to the standalone operating model.

Requirements

  • Bachelor’s degree and at least 15 years of relevant cybersecurity experience, including 7 or more years of managerial experience.
  • Technical and credible leadership style; calm, decisive, and thoughtful under pressure.
  • Excellent verbal and written communication, including explaining technical concepts to business leaders and business concepts to the IT security workforce.
  • Regular employees must meet the role’s physical requirements, including independent mobility, computer interaction, and communication with peers and coworkers; reasonable accommodations are available.

Nice to have

  • Experience building or leading global, distributed, follow-the-sun, or hybrid 24x7 security operations and serving as incident commander for high-severity, business-impacting incidents.
  • Deep knowledge of SIEM, SOAR, EDR/XDR, cloud and identity telemetry, threat intelligence, threat hunting, digital forensics, detection engineering, vulnerability and exposure management, and security data platforms.
  • Experience with APIs, infrastructure-as-code, detection-as-code, runbook-as-code, AI/ML, or agent-enabled security workflows with human oversight.
  • Strong understanding of cloud platforms, operating systems, networking, application and product security, IAM, privileged access, key management, encryption, DLP, endpoint security, OT, and manufacturing environments.
  • Experience managing MSSP/MDR, penetration-testing, threat-intelligence, or other specialist security providers, including build-versus-buy decisions and service-performance governance.
  • CISSP, CCSP, CISM, GIAC, OSCP, OSCE, CREST, or equivalent practical expertise; familiarity with NIST CSF, MITRE ATT&CK, OWASP, CIS Controls, FDA cybersecurity expectations, EU regulatory requirements, and relevant privacy and resilience obligations.
  • Experience in medical devices, healthcare, life sciences, manufacturing, critical infrastructure, or another highly regulated and high-availability environment; connected products, IoT, mobile applications, product-cloud ecosystems, or software update channels are advantageous.
  • Experience operating through a carve-out, separation, major transformation, or transition-services exit, and standing up security capabilities from the ground up.

Culture & Benefits

  • Flexible workplace structure with virtual work locations.
  • Health, dental, and vision insurance, plus Health Savings Account and Healthcare Flexible Spending Account access.
  • Life insurance, long-term and short-term disability coverage, dependent daycare spending account, paid time off, and holidays.
  • 401(k) plan with company match, employee incentive plans, Employee Stock Purchase Plan, Employee Assistance Program, and selected retirement and capital accumulation plans.
  • Equal employment opportunity and reasonable accommodations for qualified individuals with disabilities.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →