Director, Security Operations & Incident Response

About the role

The Director of Security Operations & Incident Response leads RGA's global threat management function, protecting the company’s digital ecosystem. This senior position combines deep technical expertise with strategic leadership to drive detection, emulation, intelligence, and response capabilities.

Key responsibilities

• Lead and mentor a worldwide team of threat engineers across detection, emulation, intelligence, and incident response.
• Oversee hiring, training, performance evaluation, and career development for the team.
• Develop, deploy, and operate tools and services that enable rapid detection and response to cyber threats.
• Collaborate with Incident Response, Threat Management, and other security groups to align on strategic objectives.
• Provide technical insights and recommendations to senior security leadership.
• Define and report metrics for executive‑level visibility.

Required profile

• Bachelor’s degree in cybersecurity, computer science, or a related field (advanced degree or certifications preferred).
• 7+ years of enterprise security experience, focusing on threat detection, emulation, intelligence, or incident response.
• 3+ years of leadership experience managing technical security operations teams.
• Proven track record of building detection capabilities in complex, global organizations.
• Experience coordinating across multiple time zones.

Required skills

• Hands‑on experience with SIEM platforms.
• Threat detection platforms and advanced analytics tools.
• Threat emulation and threat intelligence platforms.
• Deep knowledge of Windows, macOS, and Linux internals.