Director, Security Operations and Incident Response (Cybersecurity)

Location: Philadelphia, Pennsylvania, United States; onsite collaboration is generally preferred.

Salary: $186,639.95–$292,685.38 base pay, with the role eligible for consideration in Virginia.

Company

hirify.global is a Fortune 30 media and technology company providing connectivity, platforms, content, and digital experiences to customers worldwide.

What you will do

• Lead and scale the Security Operations Center, Security Incident Response Team, threat hunting, and threat detection functions.
• Serve as senior incident commander for high-severity cybersecurity events and coordinate response across technical, legal, privacy, communications, and executive stakeholders.
• Build operating models, staffing plans, escalation paths, runbooks, metrics, and surge capacity for concurrent major incidents.
• Lead threat hunting and Purple Team activities to identify adversary behavior, attack patterns, control gaps, and high-risk activity.
• Own enterprise detection strategy across SIEM, endpoint, cloud, identity, network, telemetry, enrichment, and automation capabilities.
• Partner with engineering and product teams to improve security tools, data pipelines, dashboards, automations, case management, and analyst workflows.

Requirements

• 10+ years of relevant cybersecurity experience, including at least 5 years managing people leaders in large, complex environments.
• Demonstrated experience managing high-severity incidents, including executive communications, containment, remediation, and post-incident improvement.
• Experience leading and scaling teams of managers, incident responders, SOC analysts, threat hunters, detection engineers, and other security professionals.
• Deep knowledge of SIEM, EDR, threat intelligence, malware analysis, digital forensics, cloud security, identity security, network security, automation, and detection engineering.
• Availability outside standard business hours, including nights, weekends, and holidays, during critical incidents supporting a 24x7 cybersecurity operation.
• Must be legally authorized to work in the United States without current or future employment sponsorship. Bachelor's degree preferred.

Nice to have

• Certifications such as CISSP, CISM, GCIH, GCIA, GCFA, GNFA, GMON, or other GIAC certifications.

Culture & Benefits

• Focus on customer experience, technology adoption, teamwork, results, growth, and inclusion.
• Support for employees' physical, financial, and emotional well-being.
• Benefits are available to eligible employees, with most non-sales positions eligible for a bonus.
• Collaboration across cybersecurity, IT, legal, privacy, communications, engineering, product, and business leadership.