Director of Security Operations and Engineering

Responsibilities

• Incident response end to end, from intake and severity model through after-action and improvement, including partnership with Legal on investigations
• Detection engineering, threat hunting, and the SIEM, EDR, SOAR, and cloud security platforms that support them
• Security Engineering strategy and delivery, with the goal of preventing incidents rather than responding to them: preventive controls, least privilege, and identity assurance across employees, contractors, and build systems
• The insider threat program, built with HR, Legal, and IT
• Automation and agentic AI that extends analyst capacity (the analyst always owns the decision)
• Security integration of acquired companies and new environments into EDB's standards
• Close partnership with IT and Product leadership to build preventive controls into the platforms, pipelines, and products they own, plus security input to third-party risk and device posture with GRC
• Scaling the program: the org design, operating rhythms, roadmap, budget, and vendor strategy that let coverage grow with the business without growing linearly with headcount

Languages