[Hiring] Director of Cyber Operations @Boldyn Networks

Role Description

Are you passionate about building and leading world-class security operations capabilities at scale? The Director of Cyber Operations is accountable for the day-to-day effectiveness and ongoing maturity of Boldyn’s global cyber security operations function. This is a small team environment, so the role blends hands-on technical delivery with operational leadership: you’ll set the operating model, drive automation and standardization, and personally provide escalation support when needed. You will ensure consistent monitoring, detection, and response across global markets. Working closely with internal IT, cloud, network, and engineering teams, you will also govern and manage third-party Managed Security Service Providers (MSSPs) to deliver measurable security outcomes.

As part of the global cyber security team, you’ll play a critical role in protecting Boldyn’s national telecommunications infrastructure. Colleagues across IT, cloud, network, and market engineering teams will rely on your technical expertise, leadership, and ability to continuously improve security operations processes and outcomes. It’s a role with significant variety and global impact, and day-to-day you’ll be involved in the following areas:

• Own the global Cyber Operations operating model and ensure effective 24x7 monitoring and response (delivered via internal teams and MSSPs) across markets/environments.
• Act as named operational owner for monitoring, logging, detection, and incident management controls; ensure design, operation, testing/validation, continuous control-health monitoring, remediation tracking, and audit evidence (e.g., ISO 27001 / Cyber Essentials+).
• Set telemetry standards and govern SOC architecture (SIEM/XDR, logging pipelines, case management), ensuring consistent onboarding and coverage across environments.
• Own detection engineering and SOAR automation outcomes: use-case lifecycle (design/validate/tune/retire) plus automation at scale (e.g., Sentinel playbooks, case management, enrichment/integrations) to reduce alert fatigue and improve MTTD/MTTR.
• Provide hands-on technical escalation support (including threat hunting where needed) and contribute to priority detections/playbooks in a small-team environment.
• Own incident response end-to-end: define severity/escalation and communications, lead major incidents, and drive PIRs/root-cause analysis and problem management through corrective actions and readiness improvements.
• Govern MSSP performance and stakeholder engagement: run monthly service reviews with the business, track KPIs/SLAs, translate risk and performance into clear actions, and drive continual improvement.

Qualifications

• Deep expertise in Azure security, cloud and network architectures, including security maturity assessments, gap analysis, and governance alignment.
• Strong security operations leadership experience, including managing 24x7 monitoring/response services, major incident response leadership, and delivering outcomes across the Microsoft Security stack and Azure Sentinel.
• Hands-on experience with detection engineering, threat hunting, log analytics, and Kusto Query Language (KQL).
• Proven experience managing third-party security service providers (MSSP/MDR): contract/SOW management, KPI/SLA definition, monthly service review cadence, and clear risk/performance communication to agree priorities and drive corrective actions.
• Proven ability to design and implement SOAR use cases, including automation, malware sandboxing, and service desk integrations within Azure Sentinel.
• Experience with log source onboarding, data normalization, schema design, data quality assurance, and operational reporting (metrics/dashboarding), including use of the Microsoft Power Platform.
• Solid understanding of threat actor TTPs, supported by frameworks such as MITRE ATT&CK, Cyber Kill Chain, NIST SP 800‑137, and SANS Security Operations.
• Ability to define, measure, and interpret operational performance metrics, KPIs, and control effectiveness, and build operational maturity through governance, RACI, runbooks/playbooks, continuous improvement, and validation (e.g., PIRs, problem management, control validation).
• Knowledge of security monitoring across IT and OT environments, including device types and infrastructure connectivity.
• Experience applying threat deception and active defense techniques to enhance detection and response capabilities.
• Relevant Azure, SOC, and Security Engineering certifications are beneficial but not required (e.g., SC‑100, SC‑200, AZ‑500, PL‑300, SBT L1/2, SANS DFIR, MITRE ATT&CK).

Benefits

• Salary: $130,000 - $150,000
• Annual Bonus: 15%
• Learning and development opportunities
• Flexible working opportunities
• Competitive benefit packages
• Paid Parental Leave
• Vacation starting at 15 days increasing with length of service
• 10 days paid sick leave
• 4 days off each year to volunteer

Company Description

At Boldyn Networks, we’re reimagining the future of interconnectivity. Our network solutions are solving some of tomorrow’s greatest challenges. We are one team across the globe. Always listening. Learning. We value different perspectives and challenge each other to be our best. Here, you can change lives today and create a better tomorrow.