Director, Threat Hunting and Adversary Response

Director Threat Hunting and Adversary Response

This job is hybrid and candidates must be available to work onsite 3 days per week in our Tampa office or the DC Metro area (once the office is established there).

The Director of Threat Hunting and Adversary Response reports to the EVP Global Cyber Operations and is responsible for driving the vision and strategy of Deepwatchs delivery of our Adversary Response and Threat Hunting services. As a part of this mission you will manage the Threat Hunting and Adversary Response Teams and oversee the development of both programs. This role also serves as Deepwatchs Incident Commander during declared cyber incidents impacting our customer base.

As part of a larger team the Director of Threat Hunting and Adversary Response must work collaboratively with Deepwatch leadership Program Managers Customer Success customers partners and sales to run our industry-leading service offerings.

In this role youll get to:

• Provide oversight and management for the Threat Hunting and Adversary Response programs and be responsible for the overall vision road mapping and strategy
• Attract and retain talent providing direction and leadership to ensure the team is aligned to established goals and are meeting KPIs and other business objectives
• Rapidly mature team capabilities to be an intelligence driven and consultative offering that drives positive customer outcomes
• Partner with other internal teams to implement automation solutions driving effectiveness and efficiencies
• Be responsible for employee administration including but not limited to performance reviews feedback coaching and employee development
• Represent the Deepwatch brand and company to customers prospects and vendors
• Partner with Talent Acquisition and HR Business Partner on talent management processes including recruiting hiring staffing projections and succession planning
• Provide input to the forecasting of technical needs and solutions for budgeting
• Act as the Incident Commander during incidents and the escalation point for Threat Hunting engagements
• Interact with customers to resolve issues provide additional information and answer questions related to incidents and hunt efforts

To be successful in this role youll need to:

• Demonstrate leadership and program management skills
• Have proven experience in Cybersecurity Operations Incident Response and Threat Hunting
• Communicate with and present to Deepwatch leadership customers and other stakeholders
• Demonstrate experience with Threat Hunting
• Demonstrate experience with Incident Handling and Response
• Demonstrate knowledge of common DFIR tools such as:
• Velociraptor
• Sleuth Kit
• Autopsy
• EnCase
• Demonstrate Subject Matter Expertise (SME) in at least one of the following areas:
• Digital Forensics & Incident Response (DFIR)
• Malware Analysis
• Reverse Engineering
• Threat Intelligence
• Network Traffic Analysis
• Penetration Testing
• Detection Development/Validation
• Be a SME of attacker methodologies including tactics techniques and procedures
• Have experience in SOAR Ticketing Systems and Threat Intelligence platforms

ITAR Compliance

This position will have access to customer data and as such is subject to International Traffic in Arms Regulations (ITAR). Upon application candidates will be asked to confirm that they are a U.S. Person as defined by the following:

• A citizen of the U.S.
• A lawful permanent resident of the United States.
• A person admitted to the United States as a refugee; or
• A person that has been granted asylum by the United States government.

The intent of this requirement is not to verify employment eligibility overall but to ensure compliance with import/export regulations. If you do not meet these requirements we encourage you to apply for other open roles at Deepwatch. This information will be verified upon offer of employment.

Statutory Pay Disclosure

The anticipated salary range for this role is $154000 to $196000 bonus stock options benefits. Actual compensation may vary from posted hiring range based upon geographic location work experience education and/or skill level.