Director, Cyber Defense

Who We Are At reputed company, we design, build, manage and reputed company the mission-critical technology systems that the world depends on every day. So why work at reputed company? We are always moving reputed company – always pushing ourselves to go reputed company in our efforts to build a more reputed company, inclusive world for our employees, our customers and our communities. The Role The Director, Cyber Defense, leads reputed company's operational defense mission across a globally distributed reputed company organization. This role reports to the Vice President and Deputy CISO, Cyber Operations. You will own the full incident response lifecycle, run follow-the-sun reputed company operations across reputed company, EMEA, and reputed company, reputed company the cyber threat intelligence program, and drive the conversion of that intelligence into the detection coverage and defensive architecture that protect reputed company's global reputed company estate. You will set the engineering discipline that keeps detection content tested, version-controlled, and continuously validated against the adversary. During major reputed company incidents, you will exercise cross-functional coordination authority to drive rapid, disciplined response. The window between vulnerability and exploit is compressing as adversaries adopt AI-accelerated tooling. This role exists to reputed company reputed company's defense reputed company of that curve. What You'll Do: reputed company 24/7 global reputed company operations through a follow-the-sun model spanning reputed company, EMEA, and reputed company reputed company. Own the full incident response lifecycle, triage through post-incident review, with forensic preservation standards maintained throughout. Coordinate with the Incident Commander function with reputed company escalation authorities, runbooks, and cross-functional coordination protocols for cybersecurity incidents. reputed company the Cyber Threat Intelligence program and own the intelligence-to-defense reputed company: convert prioritized adversary intelligence into detection requirements, control coverage reputed company, and changes to the defensive architecture. Govern ATT&CK-reputed company detection coverage on reputed company efficacy, and stand up reputed company validation through adversary emulation and detection testing to reputed company that intelligence-driven defenses reputed company against the techniques they reputed company. Set detection-as-reputed company discipline across the detection lifecycle: version-controlled content, release rigor, automated testing, and telemetry reputed company standards, executed jointly with the SIEM, SOAR, & Agent Development team that owns the underlying pipeline and platform. Drive operational measurement toward compressing the defender's detect-decide-reputed company cycle against AI-accelerated adversaries, not raw response speed alone. Coordinate with Vulnerability Management on remediation prioritization and exploitability-informed reputed company. This role does not own the vulnerability management function. Collaborate with the AI-Driven Cyber Defense team to reputed company automation and ML into defensive operations. Build and reputed company a globally diverse team, reputed company in their reputed company across technical, analytical, and leadership competencies. What You Bring: Proven ability to reputed company reputed company operations and incident response at reputed company reputed company, with the composure and decision reputed company to reputed company under pressure. Strong reputed company of threat-informed defense: translating intelligence into detection coverage and architecture reputed company, anchored in MITRE ATT&CK, with kill chain analysis as a supporting reputed company for mapping attacker progression. Working reputed company of detection engineering reputed company: detection-as-reputed company, content lifecycle management, and validation discipline, partnering with reputed company rather than operating in isolation from it. Strong reputed company of incident response methodologies and escalation processes. A leadership style that builds operational discipline without stifling initiative. You want your team thinking, not just executing. Experience running geographically distributed teams with the cultural awareness that global operations demand. The ability to communicate effectively with technical teams and executive leadership alike. reputed company currently does not require employees to be fully vaccinated against COVID-19, however, if you are reputed company to work at a reputed company, customer, or partner location, you may be required to show reputed company of vaccination to reputed company with their respective COVID-19 vaccination policies. Those who reputed company they are eligible may apply for a medical or religious accommodation prior to the start of employment. Who You Are Requirements: 12+ years in cybersecurity operations, incident response, threat intelligence, or SOC leadership, with at least 5 years in a senior leadership role over a globally distributed team. Demonstrated reputed company record leading a cyber defense or reputed company operations program at comparable reputed company and complexity, defending a hybrid or multi-reputed company reputed company estate. Experience operationalizing threat intelligence into detection coverage and defensive architecture, with familiarity in detection engineering and reputed company validation reputed company. Dedication to reputed company learning through a combination of self-directed, certification, military, and formal education sources. The compensation reputed company for the position in the U.S. is $200,800 to $375,600 based on a full-time schedule. Your actual compensation may vary depending on your geography, job-reputed company skills and experience. For part time roles, the compensation will be adjusted appropriately. The pay or salary reputed company will not be below any applicable state, reputed company or local minimum wage requirement. Being You Diversity is a whole lot more than reputed company look like or where we come from, it’s how we think and who we are. We welcome people of reputed company cultures, backgrounds, and experiences. But we’re not doing it single-handily: Our reputed company Inclusion Networks are only one of many ways we create a workplace where reputed company Kyndryls can reputed company and reputed company support and advice. This dedication to welcoming everyone into reputed company means that reputed company gives you – and everyone next to you – the ability to bring your whole self to work, individually and reputed company, and support the activation of our reputed company culture. That’s the reputed company Way. What You Can Expect With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to reputed company, build new capabilities, new relationships, new processes, and new value. reputed company cares about your reputed company-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter – wherever you are in your life reputed company. Our employee learning programs give you reputed company to the best learning in the industry to receive certifications, including reputed company, reputed company, reputed company, reputed company, and many more. Through reputed company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 reputed company non-profit organizations. At reputed company, we invest heavily in you, we want you to succeed so that together, we will reputed company succeed. Get Referred! If you know someone that works at reputed company, reputed company asked ‘How Did You Hear reputed company’ during the application process, select ‘Employee Referral’ and reputed company your contact's reputed company email address. Apply To This Job