Director of Cyber Operations

Boldyn Networks•Las Vegas, NV

7d•Hybrid

About The Position

The Director of Cyber Operations is accountable for the day-to-day effectiveness and ongoing maturity of Boldyn’s global cyber security operations function. This is a small team environment, so the role blends hands-on technical delivery with operational leadership: you’ll set the operating model, drive automation and standardization, and personally provide escalation support when needed. You will ensure consistent monitoring, detection, and response across global markets. Working closely with internal IT, cloud, network, and engineering teams, you will also govern and manage third-party Managed Security Service Providers (MSSPs) to deliver measurable security outcomes.

Requirements

Deep expertise in Azure security, cloud and network architectures, including security maturity assessments, gap analysis, and governance alignment
Strong security operations leadership experience, including managing 24x7 monitoring/response services, major incident response leadership, and delivering outcomes across the Microsoft Security stack and Azure Sentinel
Hands-on experience with detection engineering, threat hunting, log analytics, and Kusto Query Language (KQL)
Proven experience managing third-party security service providers (MSSP/MDR): contract/SOW management, KPI/SLA definition, monthly service review cadence, and clear risk/performance communication to agree priorities and drive corrective actions
Proven ability to design and implement SOAR use cases, including automation, malware sandboxing, and service desk integrations within Azure Sentinel
Experience with log source onboarding, data normalization, schema design, data quality assurance, and operational reporting (metrics/dashboarding), including use of the Microsoft Power Platform
Solid understanding of threat actor TTPs, supported by frameworks such as MITRE ATT&CK, Cyber Kill Chain, NIST SP 800‑137, and SANS Security Operations
Ability to define, measure, and interpret operational performance metrics, KPIs, and control effectiveness, and build operational maturity through governance, RACI, runbooks/playbooks, continuous improvement, and validation (e.g., PIRs, problem management, control validation)
Knowledge of security monitoring across IT and OT environments, including device types and infrastructure connectivity
Experience applying threat deception and active defense techniques to enhance detection and response capabilities

Nice To Haves

Relevant Azure, SOC, and Security Engineering certifications are beneficial but not required (e.g., SC‑100, SC‑200, AZ‑500, PL‑300, SBT L1/2, SANS DFIR, MITRE ATT&CK)

Responsibilities

Own the global Cyber Operations operating model and ensure effective 24x7 monitoring and response (delivered via internal teams and MSSPs) across markets/environments.
Act as named operational owner for monitoring, logging, detection, and incident management controls; ensure design, operation, testing/validation, continuous control-health monitoring, remediation tracking, and audit evidence (e.g., ISO 27001 / Cyber Essentials+).
Set telemetry standards and govern SOC architecture (SIEM/XDR, logging pipelines, case management), ensuring consistent onboarding and coverage across environments.
Own detection engineering and SOAR automation outcomes: use-case lifecycle (design/validate/tune/retire) plus automation at scale (e.g., Sentinel playbooks, case management, enrichment/integrations) to reduce alert fatigue and improve MTTD/MTTR.
Provide hands-on technical escalation support (including threat hunting where needed) and contribute to priority detections/playbooks in a small-team environment.
Own incident response end-to-end: define severity/escalation and communications, lead major incidents, and drive PIRs/root-cause analysis and problem management through corrective actions and readiness improvements.
Govern MSSP performance and stakeholder engagement: run monthly service reviews with the business, track KPIs/SLAs, translate risk and performance into clear actions, and drive continual improvement.