> Markdown version of [/jobs/ext/4721535-global-director-security-operations-center-soc](https://www.wearedevelopers.com/jobs/ext/4721535-global-director-security-operations-center-soc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Global Director, Security Operations Center (SOC)

- **Company:** BlueVoyant
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Artificial Intelligence, Apple Mac Systems, Software System Penetration Testing, Software Documentation, Cyber Security, Digital Forensics, Intrusion Detection and Prevention, Network Intrusion Detection Systems, Network Monitoring, Packet Analyzer, Network Protocols, Web Application Security, Security Information and Event Management, Software Vulnerability Management, Network Access Control, Computer Network Operations, Mitre Att&ck, Cyber Threat Analysis, National Institute of Standards and Technology Cybersecurity Framework, Information Technology, Microsoft Sentinel, Malware Detection, Splunk, Security Orchestration, Automation & Response
- **Published:** November 14, 2026
- **Apply:** http://bluevoyant.applytojob.com/apply/jobs/details/1Gyz7lyy7I

## About the Role

* Significant experience leading Security Operations at scale, including managing managers across multiple regions and time zones.
 * Proven track record of leading a global or multi-site SOC (or equivalent MSSP/MDR operation) of 50+ staff in a 24/7/365 environment.
 * Demonstrated success owning customer escalations and executive client relationships, with a focus on service quality and retention.
 * Experience defining and delivering operational metrics, budgets, capacity plans and executive-level reporting.
 * Strong cross-functional leadership and the ability to influence senior stakeholders across Customer Success, Product, Engineering and Sales.
 * Deep technical understanding of SOC operations, incident response, intrusion detection/prevention and threat analysis.
 * Advanced knowledge of network protocols and devices, and of Windows, macOS and Unix/Linux environments.
 * Hands-on familiarity with SIEM, SOAR and XDR platforms (Microsoft Sentinel, Defender and Splunk preferred).
 * Experience driving automation and process improvement within security operations.
 * Exceptional written and verbal communication skills, with the ability to present complex technical topics clearly to executive and non-technical audiences.
 * Composure and sound judgment in high-pressure situations.
 * Strong knowledge of SIEM, SOAR and EDR/XDR; incident response frameworks and post-incident review; malware detection and packet analysis; network monitoring and HIDS/NIDS; case management and knowledge base systems; email security, web security gateways and DLP; encryption, network access control and vulnerability management.
 * Ability and willingness to work on-site in College Park, MD 2-3 days per week, with occasional international travel.

Nice to Have:

 * Experience leading or partnering with teams based in the Philippines and Europe.
 * Experience in an MSSP, MDR or managed security services environment.
 * Background in intrusion analysis, digital forensics, threat hunting or penetration testing.
 * 12+ years of experience in security operations, including 5+ years leading SOC managers or multi-team operations.
 * Familiarity with frameworks such as MITRE ATT&CK, NIST CSF and NIST 800-61.
 * Relevant certifications such as CISSP, CISM, GCIH, GCIA, GCFA or GSOM.

Education:

 * Bachelor's degree in Information Security, Computer Science or a related technical field, or equivalent professional experience in security/network operations.
 * A Master's degree in Cybersecurity, Information Assurance or Business Administration is preferred.

## Description

* Set and execute the global SOC strategy, operating model and roadmap, aligned to company objectives and customer commitments.
 * Lead, develop and hold accountable the US and UK/EMEA SOC Managers, building a high-performing leadership bench and a consistent "one SOC" culture across regions and time zones.
 * Own end-to-end SOC service delivery for all customers, ensuring world-class quality, SLA attainment and consistent performance across the follow-the-sun model.
 * Serve as the executive escalation point for critical incidents and customer escalations, partnering with Client Success and the CCO on remediation plans, executive communication and client retention.
 * Define, measure and report global SOC KPIs and metrics (SLA performance, incident trends, quality, efficiency, customer outcomes) to the CCO and executive leadership.
 * Drive workforce and capacity planning, budget management, shift and coverage models, and hiring strategy across the US, Europe and the Philippines.
 * Partner cross-functionally with Client Success, Content Engineering, Threat Hunt, Threat Intelligence, Product, Sales and Engineering leadership to drive service improvements and represent SOC priorities in company-wide decision-making.
 * Champion automation, AI and process standardization to improve analyst efficiency, scalability and detection-to-response outcomes.
 * Oversee incident investigation, declaration, handling, response and documentation standards globally, ensuring quality and consistency.
 * Lead post-incident reviews for critical events and embed lessons learned into processes, playbooks and training.
 * Own global SOC policies, procedures and incident response reporting, ensuring alignment with contractual, regulatory and compliance requirements, including US federal contract requirements.
 * Engage directly with customer executives and IT/security leadership, including participation in strategic reviews, QBRs and pre-sales conversations where SOC expertise is required.
 * Build career paths, training and development frameworks for Team Leads and Analysts to strengthen retention and succession planning.
 * Maintain a strong awareness of the evolving threat landscape and ensure the SOC adapts its capabilities accordingly., Are you resident in and legally authorized to work in the United States of America?*
Do you hold US citizenship? (Required to perform work on some of the company's federal contracts.)*
Are you able to work on-site at our College Park, MD office 2-3 days per week?*
Have you led a Security Operations Center (SOC), MSSP or MDR operation of 50 or more staff in a 24/7/365 environment?*
Have you directly managed managers or team leads, with accountability for their teams' performance?*
Have you led security operations teams across multiple regions or time zones?*
Have you owned customer escalations and executive-level client relationships for managed security services?*
Do you have hands-on experience with SIEM, SOAR and/or XDR platforms, such as Microsoft Sentinel, Defender or Splunk?*
Are you willing to travel internationally on occasion, including to Europe and the Philippines?*
Please acknowledge that you accept our Candidate Privacy Notice Terms and Conditions - https://www.bluevoyant.com/candidate-privacy-notice*
The following questions are entirely optional.
To comply with government Equal Employment Opportunity and/or Affirmative Action reporting regulations, we are requesting (but NOT requiring) that you enter this personal data. This information will not be used in connection with any employment decisions, and will be used solely as permitted by state and federal law. Your voluntary cooperation would be appreciated. Learn more.
Gender
Race/Ethnicity
Human Check*