Director, Cyber Monitoring

The Charles Stark Draper Laboratory•Cambridge, MA

2d•Onsite

About The Position

The Director 1, Cyber Monitoring is part of the CISO Leadership team and accountable for leading the organization’s cyber monitoring and threat detection efforts. Oversees a 24/7 proactive, continuous monitoring, incident response, and vulnerability management capability. The incumbent displays a strategic blend of high-level business acumen and technical expertise to enable efficient and effective, proactive cyber monitoring.

Requirements

Bachelor’s or Master's degree in Cybersecurity, Computer Science, or a related technology discipline.
15 + years of experience in the information security, security operations, or technology risk management, including proven leadership experience.
5+ years of program and project management experience, including estimating and forecasting, budget and financial management, staffing / hiring and resource management.
Deep understanding of network security, cloud environments (AWS, Azure, GCP), and attack surfaces
Ability to perform business impact analyses and align security investments with overall company objectives.
Deep understanding of frameworks like NIST, ISO 27001, or CMMC to maintain regulatory adherence.
Designing and leading tabletop exercises, managing purple/red team drills, and directing emergency response strategies
Overseeing threat intelligence platforms, SIEM, and EDR tooling to mitigate attack surfaces.
Translating complex cyber concepts into actionable language for C-suite executives and the board of directors.
Experience managing conflict and developing win-win solutions with others.
Applicants selected for this position will be required to obtain and maintain a US government security clearance.
Active Top Secret Clearance with SCI eligibility is required.

Responsibilities

Security Operations Center (SOC) Leadership: management over the SOC/Infosec teams, ensuring 24/7 continuous monitoring, alert triage, and threat hunting.
Incident Response Oversight: Manage and coordinate responses to active security incidents, breaches, and cyber threats.
Metric & Threat Reporting: Establish Key Risk Indicators (KRIs) and provide regular reports to the CISO on the company's security posture, via automated dashboards.
Tooling & Strategy: Evaluate, implement, and optimize security monitoring tools like SIEM, SOAR, EDR, and threat intelligence platforms.
Risk & Compliance Management: Enables continuous control monitoring and compliance with relevant industry regulations.