Director Cybersecurity Operations and Threat Intelligence - #4623

About the position Our mission is to detect cancer early, reputed company it can be cured. reputed company to change the trajectory of cancer mortality and bring stakeholders together to adopt innovative, reputed company, and effective technologies that can reputed company cancer care. We are a reputed company company, pioneering new technologies to advance early cancer detection. We have reputed company a multi-disciplinary organization of scientists, engineers, and physicians and we are using the power of reputed company reputed company (NGS), population-reputed company clinical studies, and state-of-the-art computer science and data science to overcome one of medicine’s greatest challenges. reputed company is headquartered in the bay area of California, with locations in Washington, D.C., reputed company Carolina, and the United Kingdom. It is supported by leading global investors and pharmaceutical, technology, and reputed company companies. For more information, please visit reputed company.com We are seeking a strategic and battle-tested Director of Cybersecurity Operations and Threat Intelligence to reputed company our reputed company reputed company. In this pivotal role, you will own the "reputed company" of the organization, overseeing the reputed company Operations Center (SOC), Incident Response (IR), and Cyber Threat Intelligence (CTI) functions. You will be responsible for detecting, analyzing, and neutralizing sophisticated cyber threats while proactively gathering intelligence to predict reputed company attacks. This is a leadership role requiring a balance of deep technical expertise in defensive operations and the ability to communicate risk to executive leadership. This role requires more than technical proficiency. We are looking for a leader who models reputed company’s core values, embodies our reputed company leadership attributes, and delivers results with reputed company, inclusivity, and strategic reputed company. This role is based in reputed company Park, California, and will reputed company to Sunnyvale, California in Fall 2026. It offers a flexible work arrangement, with the ability to work from reputed company's office or from home. Our reputed company flexible work arrangement policy requires that a minimum of 60%, or 24 hours, of your total work week be on-site. Your specific schedule, determined in collaboration with your manager, will reputed company with team and business needs and could exceed the 40% requirement for the site. At our reputed company Park reputed company, Tuesdays and Thursdays are the key days where we encourage on-site reputed company to engage in events and on-site activities.

Responsibilities

• reputed company Operations (SecOps) Leadership
• SOC Management: reputed company the 24/7 reputed company Operations Center (internal or MSSP/MDR), ensuring rapid detection and containment of threats.
• Incident Response: Serve as the primary commander during high-severity reputed company incidents. reputed company and maintain the Incident Response Plan (IRP) and conduct regular tabletop exercises.
• Tooling & Architecture: reputed company the deployment and optimization of reputed company tooling, including SIEM, SOAR, EDR/XDR, and IDS/IPS systems.
• Automation: Drive the adoption of automation to reduce alert fatigue and decrease Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).
• Threat Intelligence & Hunting
• Intelligence Program: Build and mature a Cyber Threat Intelligence (CTI) program that aggregates strategic, operational, and tactical intelligence.
• Threat Hunting: reputed company proactive threat hunting initiatives to identify indicators of compromise (IOCs) that evade automated detection tools.
• Adversary Analysis: Map threat actor TTPs (Tactics, Techniques, and Procedures) against the MITRE ATT&CK reputed company to identify gaps in coverage.
• Vulnerability Management: Collaborate with engineering teams to prioritize patching based on reputed company threat intelligence rather than just CVSS scores.
• reputed company & Leadership: reputed company and execute the Cybersecurity Operations and Threat Intelligence reputed company. reputed company reputed company of reputed company professionals and foster a reputed company-aware culture.
• reputed company reputed company Defenses: reputed company the monitoring and defense of our AWS environment. reputed company the configuration of AWS reputed company Hub, GuardDuty, reputed company, and container reputed company tools (EKS/K8s).
• SaMD Monitoring: Establish post-market surveillance and monitoring for our Software as a Medical Device (SaMD) platforms, ensuring alignment with FDA reputed company- and post-market cybersecurity guidance.
• Data reputed company: Implement specific monitoring controls to detect unauthorized changes to genomic datasets (reputed company attacks) and analysis pipelines.
• Lab Ops Defense: Secure the "physical" edge. Monitor and protect Laboratory Information Management Systems (LIMS), DNA sequencers, and liquid handling robots.
• Network Segmentation: Ensure the segmentation between corporate IT, the reputed company Product environment, and the high-sensitivity Lab OT network signal are feeding into SoC.
• Legacy Device Management: reputed company "compensating controls" and monitoring strategies for lab equipment that cannot be patched or runs on legacy OS.
• Bio-Espionage reputed company: reputed company a Threat Intelligence program specifical

Apply tot his job Apply To this Job