Director, Threat Detection & Response
美国北方正在寻找威胁检测和响应总监,担任网络安全和技术领导者。你将负责定义战略并建立我们事件响应,检测工程,威胁猎杀和网络威胁智能的能力。作为这个高度技术集团的领导人,你将监督针对朝鲜支付处理基础设施复杂的网络安全威胁的预防,发现和响应。你将管理一个经验丰富的专家团队,确保该团队在云,网络,终端点和身份安全方面保持最高技术标准,同时作为关键事件期间执行领导者的最终升级点。你将做什么:· 在重大,高度严重的安全事件中担任高级事件指挥官和最终升级地点。· 引导组织应对事件战略,确保快速分类,控制,根除和恢复在终端点,网络,云,身份和应用层面上。·监督全面的数字法医和根源分析,推动跨团队解决系统缺陷并减轻欺诈或财务损失。· 引导检测工程战略,确保团队开发,调整和验证高效检测逻辑。· 基于事件趋势和 MITRE ATT&CK 框架进行主动,假设驱动的威胁猎取计划,以发现未被发现的妥协。·建立和集成网络威胁智能技术来积极识别和对付与支付行业相关的新兴敌方 TP. · 管理,指导和发展高绩效的高级事件响应人员,侦测工程师和威胁猎人团队。· 将复杂的技术发现和事件结果转化为北方执行领导层和董事会的明确可操作叙述。我们需要你所需的是:·计算机科学学士学位,网络安全或相关领域,或者教育与经验组合。· 10年以上的实践信息安全经验,在事件响应,检测工程和技术方面拥有深入专业知识。
查看英文原文
Director, Threat Detection & Response
North- Remote, US
North is seeking a Director of Threat Detection and Response to serve as a key cybersecurity and technical leader. You will be responsible for defining the strategy and building the capabilities of our Incident Response, Detection Engineering, Threat Hunting, and Cyber Threat Intelligence.
As the leader of this highly technical group, you will oversee the prevention, detection, and response to complex cybersecurity threats targeting North's payment processing infrastructure. You will manage a team of deeply experienced experts, ensuring the team maintains the highest technical standards in cloud, network, endpoint, and identity security, while acting as the ultimate escalation point for executive leadership during critical incidents.
What you'll do:
- Serve as the senior incident commander and ultimate escalation point during major, high-severity security incidents.
- Direct the organization's incident response strategy, ensuring rapid triage, containment, eradication, and recovery across endpoint, network, cloud, identity, and application layers.
- Oversee comprehensive digital forensics and root cause analysis, driving cross-team remediation of systemic gaps and mitigating fraud or financial loss.
- Direct the strategy for detection engineering, ensuring the team develops, tunes, and validates high-fidelity detection logic.
- Lead proactive, hypothesis-driven threat hunting programs based on incident trends and the MITRE ATT&CK framework to uncover undetected compromises.
- Build and integrate a Cyber Threat Intelligence to proactively identify and counter emerging adversary TTPs relevant to the payments industry.
- Drive the strategy and buildout of the company's enterprise logging and data pipelines, ensuring comprehensive visibility across cloud and on-premises environments to power high-fidelity detection and rapid investigations.
- Manage, mentor, and develop a high-performing team of senior incident responders, detection engineers, and threat hunters.
- Translate complex technical findings and incident outcomes into clear, actionable narratives for North's executive leadership and board of directors.
What we need from you:
- Bachelor's degree in Computer Science, Cyber Security or related field, or combination of education and experience.
- 10+ years of hands-on information security experience, with deep subject-matter expertise in incident response, detection engineering, and threat hunting.
- Hands-on expertise managing complex security incidents, advanced threat hunting, and detection engineering across modern environments (cloud, identity, network, endpoint).
- Demonstrated track record in a leadership role overseeing complex security operations and high-performing technical teams.
- Proficiency with advanced Incident Response tools, digital forensic protocols, log analysis techniques, and managing detection rules in modern platforms.
- Strong expertise in log management and telemetry, including designing and overseeing log collection architectures and data pipelines across complex cloud and on-premises environments.
- Expertise in navigating the intersection of AI and cybersecurity, with specific experience investigating attacks on AI agents, countering AI-facilitated threats, and integrating AI agents into incident response workflows.
- Architectural understanding of internal AI and agentic infrastructure, ensuring the secure deployment, monitoring, and incident readiness of in-house models and autonomous agent networks.
- Solid understanding of cloud infrastructure (AWS, Azure, GCP), Windows/Linux systems, and modern identity platforms.
- Familiarity with the payments/fintech regulatory environment, including working knowledge of PCI-DSS.
- Excellent communication skills, with a proven ability to brief executive leadership, legal, and compliance teams during high-pressure situations.
Preferred Certifications:
- GIAC Certified Forensic Analyst (GCFA)
- GIAC Certified Incident Handler (GCIH)
- GIAC Network Forensic Analyst (GNFA)
- GIAC Cyber Threat Intelligence (GCTI)
- Offensive Security Certified Professional (OSCP)
- Offensive Security Incident Response (OSIR)
- CompTIA CySA+
Salary Range: $175,000- $235,000
Pay within this range varies by work location and on job-related knowledge, skills, and experience. We look forward to discussing your salary expectations and our full total rewards offerings throughout the interview process.
What we offer:
We offer a comprehensive benefits package that enables our teams to live a life well lived, both personally and professionally. Some of our perks include:
- Medical, Dental, & Vision Coverage
- Flexible Paid Time Off
- 401(k) + Match
- Mental Health Support & Well-Being Program
- Paid Maternity & Paternity Leave
- Education Assistance
- Company-funded Lifestyle Spending Account
Please note: North is a US based company and this role is not eligible for current or future sponsorship.
Let’s go North, together.
Join our mission to build the largest suite of credit card processing and merchant services. It’s one simple payment platform backed by the most diverse payment companies. From credit card processing to back-office management, North points the way to smarter, faster, and just plain better payment solutions.
Who we are:
North, and our family of companies, are committed to helping entrepreneurs grow their businesses. As an end-to-end payment solutions company, we provide everything business owners need to get paid, whether they serve customers in a physical storefront, online, or both. We pride ourselves on being large enough to offer customized solutions to our enterprise-level clients while remaining agile enough to take an award-winning, hands-on approach to personal service that our merchants won’t find anywhere else.
Let’s go North, together! Our most important resource is our people. Join our diverse team of innovators and do-ers and make your mark on the future of payments technology. We're proud to offer benefits that help our team members further their overall well-being through unique initiatives that are both personally and professionally fulfilling.
At North, we celebrate diversity and create an inclusive environment for everyone. We are an equal opportunity employer.
To learn more about North, and our family of companies, visit our website:
Originally posted on Himalayas