What are the responsibilities and job description for the Director – Cybersecurity Operations position at American Technology Services?
About American Technology Services LLC
American Technology Services (ATS) started in 1994 with the same mission as today, providing high-quality managed IT services, network support, and cybersecurity services to firms where quality matters most – the organizations that rely heavily on information technology and high levels of services. Over the years, ATS has built client trust that has lasted for years and years. As time goes forward, our consultative approach resonates well, and our “corporate knowledge” about our clients’ IT operations helps our clients perform at a higher level.
About the role
Provides strategic leadership over the Cybersecurity Operations department, encompassing Resilience Operations, and Defense & Response teams. Ensures predictive, adaptive, and intelligence-driven security services through modern SOC, SOAR, and automation strategies.
What you'll do
Primary Responsibilities:
- Oversee and align all cybersecurity operations with organizational goals and customer SLAs.
- Drive automation and orchestration across SIEM and SOAR platforms to reduce manual effort using modern tooling to include AI.
- Define operational maturity goals and lead continuous improvement initiatives.
- Manage staffing, budgets, and performance metrics across functional teams.
- Establish cross-functional collaboration with Engineering, Development, and Customer Operations.
- Communicate key performance and risk indicators to leadership.
Technical Skills:
- Expertise in SIEM design and rule management.
- Strong understanding of SOAR workflows, threat intelligence integration, and log enrichment.
- Incident response, forensics, and root cause analysis.
- Cloud and hybrid infrastructure security architecture.
Leadership Skills:
- Strategic leadership and executive communication.
- Team building, coaching, and mentoring.
- Analytical decision-making and KPI-based reporting.
Qualifications
Minimum Requirements:
- 8 years of progressive leadership in cybersecurity, with direct experience managing SOCs, security engineering, or detection/response teams.
- Demonstrated success leading SOC transformations with a focus on automation, engineering-led detection, and scalable security infrastructure.
- Strong understanding of Continuous Threat Exposure Management
- Hands-on experience with open-source security and SOAR tools such as Wazuh SIEM, Splunk, N8N, etc..) and cloud-native detection frameworks.
Preferred Requirements:
- Master’s degree or professional certification (CISM, CISSP, GIAC).
- Technical proficiency in scripting (e.g., Python) and cloud security platforms (AWS, Azure).
- Exceptional communication skills and ability to engage with C-level executives, both internally and with client stakeholders.
- Prior experience integrating security tools into DevOps workflows using GitHub Actions, Jenkins, or similar systems.