Senior Director of Cyber Defense

Responsibilities:

• Define and execute Entrata’s cyber defense strategy and multi-year operational roadmap aligned with enterprise risk. Serve as Incident Commander for significant security incidents—coordinating technical response, triage, containment, eradication, recovery, and business decisions.

• Lead detection, alerting, and investigation across the technology stack. Create and maintain incident response playbooks, runbooks, severity levels, decision rights, regional time-zone handoffs, and escalation paths.

• Serve as the frontline executive interface for enterprise clients during active incidents, delivering transparent technical briefings, root-cause analyses (RCAs), and post-incident remediation updates. Partner with Legal, Privacy, Communications, and Customer Success on crisis messaging.

• Establish and present strategic cyber metrics, threat assessments, and operational maturity benchmarks to executive leadership, audit committees, and board stakeholders.

• Drive continuous maturity across threat detection and response to align with enterprise compliance frameworks, regulatory standards, and third-party audit requirements while making timely, risk-based decisions in high-stress environments.

• Proactively leverage approved GenAI tools to automate routine tasks while serving as the "Human-in-the-Loop" to audit outputs, maintain prompt competency, and enforce strict data governance and PII protection protocols.

Minimum Qualifications:

• 10–15 years of progressive, relevant experience in cybersecurity, security operations (SOC), incident response, or cyber defense.

• Proven track record leading enterprise security operations, incident response, or cyber defense programs.

• Expert-level incident command and incident response skills in high-stakes environments.

• Demonstrated experience in direct, customer-facing executive engagement and client briefings during high-severity incidents.

• Demonstrated background building or maturing SOC/IR organizations within enterprise environments subject to rigorous audit, compliance, and governance controls.

• Deep, comprehensive understanding of information security principles, threat vectors, controls, technologies, and operating models.

• Exceptional executive-level communication, crisis management, workload prioritization, and decision-making capabilities under pressure.

Preferred Qualifications:

• Active executive security credentials such as CISSP, CISM, CISA, or GIAC (GCIH, GCFA).

• Experience leading cyber defense and incident command within multi-tenant, cloud-native SaaS platforms (AWS, Azure, GCP).

• Hands-on leadership implementing security automation (SOAR), modern SIEM/XDR analytics, threat intelligence, and proactive threat hunting programs (e.g., MITRE ATT&CK framework).

• In-depth familiarity with SOC 2 Type II, ISO 27001, NIST CSF, FedRAMP, GDPR, and CCPA regulatory environments.

• Master’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.

AI & Operational Fluency:

• AI Integration: Proactively leverages company-approved GenAI tools to automate routine tasks and accelerate high-value deliverables.

• Strategic Oversight: Functions as the "Human-in-the-Loop," taking full accountability for auditing AI outputs for factual accuracy, brand alignment, and the removal of hallucinations.

• Data Governance: Adheres strictly to AI security protocols, ensuring no proprietary or Personally Identifiable Information (PII) data is exposed to unauthorized models.

• Prompt Competency: Demonstrates the ability to craft clear, context-rich prompts to achieve consistent, high-quality results across various business domains.