Director of Cyber Defense

Lead cyber defense for a diverse, multi-entity ecosystem. You'll own detection, response, threat intelligence, hunting, and forensics as a shared service — with global visibility and consistent readiness no matter where a threat surfaces.This is an AI-first leadership role. You'll pioneer agentic cyber defense — deploying AI agents to triage, investigate, and respond under strong human oversight — while also securing the AI platforms and agentic workloads the business runs on.You're a fit if you bring: deep operational expertise in the Microsoft security ecosystem, a track record building and transforming security teams, and real experience scaling AI/ML into security operations.What You'll DoOwn cyber defense end-to-end — set strategy, standards, and metrics across detection engineering, IR, threat intel, hunting, and DFIRDirect 24x7 global monitoring across a multi-tenant environment, including regulated financial entities, with consistent coverage and SLAsBuild the agentic SOC — architect AI agents for alert enrichment, triage, investigation, and automated response, with clear guardrails and escalation pathsGovern and defend AI itself — set standards for AI risk, data handling, and auditability; protect AI gateways, model endpoints, and agent frameworks from prompt injection, abuse, and exfiltrationCommand incident response — own the IR framework and playbooks, lead major incidents, drive post-incident reviews and fixesDrive detection engineering — lead SIEM/SOAR strategy, AI-enhanced detections, and behavioral analytics to cut time-to-detect and time-to-respond- Microsoft SentinelMature threat intel & hunting — run a PIR-driven intel program and proactive, hypothesis-based huntingEngage stakeholders — partner across entity leadership, IT, legal, and compliance; report posture to executives and boardsBuild the team — hire, coach, and evolve roles as agentic tools reshape how the work gets doneKeep it compliant — ensure monitoring and response meet regulatory obligations, including for federally regulated banking entitiesTop 3 Components for this role-AI Agentic-SOC buildout-SIEM- Microsoft Sentinel