Vice President - Security Operations Center and Cyber Defense

About the role

The Vice President of the Security Operations Center (SOC) at Saviynt leads the global cyber‑defense function, overseeing 24/7 security operations, threat detection, hunting, and incident response. This senior leader defines strategy, drives operational excellence, and provides risk‑based insights to executive leadership and the board.

Key responsibilities

• Lead and continuously mature a global 24/7 SOC to detect, analyze, and respond to cyber threats in real time.
• Refine SOC operating model, coverage strategy, escalation paths, and incident command structure.
• Serve as Incident Commander for major incidents and direct overall incident response activities.
• Develop and execute a proactive threat‑hunting program aligned with MITRE ATT&CK and D3FEND.
• Establish and maintain IR playbooks, runbooks, and cross‑functional coordination with IT, Legal, Communications, Risk, and Compliance.
• Oversee attack surface management, dark‑web monitoring, and integration of threat‑intelligence into detection controls.
• Own the SOC technology stack (SIEM, SOAR, EDR/XDR, CNAPP, cloud security tools, case management, forensic platforms) and drive automation and orchestration.
• Manage, mentor, and grow high‑performing SOC, threat‑hunting, incident‑response, and threat‑intelligence teams.

Required profile

• 15+ years of experience leading high‑performing cybersecurity teams.
• Proven track record of building and scaling global SOC operations.
• Strong strategic vision with the ability to translate risk into actionable security initiatives.
• Excellent communication skills for reporting to executive leadership and the board.

Required skills

• SIEM
• SOAR
• EDR/XDR
• CNAPP
• MITRE ATT&CK
• D3FEND
• Attack Surface Management
• Dark Web Monitoring
• Threat Intelligence integration
• Automation and orchestration