Director of Security Engineering & Operations, Payscale

• 10+ years in information security, including 4+ years in a lead or management role
• Across security engineering and/or security operations functions
• Proven people-management track record: direct reports, performance cycles, and
• Team development in a security context
• Expert, hands-on knowledge of both security engineering (controls design,
• Automation, tooling integration) and security operations (detection, incident
• Response) — capable of acting as architect, engineer, incident handler, lead, and
• Manager
• Experience with the CrowdStrike Falcon platform (EDR, Identity Protection, Data
• Protection, AIDR, ZTA, Exposure Management) and SIEM/SOAR orchestration
• Demonstrated experience owning or managing an MDR or MSSP vendor
• Relationship
• Strong foundation in cloud security (AWS preferred), endpoint security, identity and
• Access management, and zero-trust architecture
• Strong experience in vulnerability and exposure management and
• Mitigation/remediation strategies
• Scripting and automation ability in PowerShell, Python, or Bash; comfortable with
• Detection-as-code and infrastructure-as-code approaches
• Experience with the MITRE ATT&CK framework and the ability to map operational
• Data to TTPs for structured threat analysis
• Experience building operational, engineering, and vulnerability metrics and
• Management reporting, and driving improvement through a regular reporting
• Cadence
• Experience with zero-trust networks and platforms such as Cloudflare, Zscaler, or
• AppGate
• Experience with Data Loss Prevention and CASB architectures and tooling such as
• Forcepoint, Netskope, or Zscaler
• Familiarity with SOAR and automation platforms such as Tines, n8n, or Ansible

Desirable

• The Director, Security Engineering & Operations directs, manages, and leads Payscale’s
• Security Engineering and Eecurity Operations functions. This is a hands-on leadership role:
• The Director sets strategy and manages the team while remaining directly engaged in
• Architecture, tooling, automation, and incident command. Responsibilities span the design
• And hardening of security controls, threat detection and incident response, vulnerability
• And exposure management, endpoint and identity protection, and security automation
• Across Payscale’s corporate, cloud, and hosting environments. The Director owns
• Payscale’s MDR relationship and is accountable for the maturity, performance, and
• Roadmap of both functions
• This role reports to the CISO, VP - Cybersecurity & Enterprise Technology
• Direct, manage, and lead the security engineering and security operations team
• Members; own hiring, onboarding, performance reviews, and career development
• Plans aligned to Payscale’s Information Security Career Ladder
• Set strategy and quarterly/annual objectives for both functions and translate them
• Into a prioritized, measurable roadmap; hold regular 1:1s and team connects to
• Maintain a high-performance, feedback-rich culture
• Mentor engineers and analysts at all career levels, providing task-based directives,
• Technical coaching, and growth-oriented feedback
• Own the on-call rotation and after-hours escalation path across both functions,
• Ensuring coverage for time-sensitive detection and response
• Serve as a working leader — remaining hands-on in engineering, architecture, and
• Incident response rather than leading solely through delegation
• Security Engineering
• Own the design, implementation, and continuous hardening of security controls
• Across corporate, cloud, and hosting environments
• Build and maintain security automation and integrations — SOAR, detection-as-
• Code, and infrastructure-as-code guardrails — to scale coverage without adding
• Headcount
• Engineer and operate the security tooling stack (EDR/XDR, SIEM, identity
• Protection, DLP/CASB, vulnerability scanning), ensuring platforms are well-
• Integrated and meet architectural standards
• Partner with Engineering and Infrastructure to embed “secure by design” into
• CI/CD, cloud architecture, and product development
• Drive adoption of a zero-trust methodology across identity, endpoint, network, and
• Application layers
• Lead security engineering for enterprise AI and agentic tooling adoption, building
• Controls and guardrails for safe internal use
• Drive the threat detection and incident response capability: detection engineering,
• Playbook development, tabletop exercises, and continuous improvement of
• MTTA/MTTR metrics
• Lead or oversee incident response events as the designated incident manager for
• Significant or multi-team incidents, running incident command end-to-end
• Own the MDR relationship, holding the provider accountable to SLAs, coverage,
• And response outcomes
• Extend detection and response to secure enterprise AI and agentic tooling
• Adoption
• Own the vulnerability and exposure management function across all corporate and
• Hosting environments, coordinating cross-functionally on mitigation and
• Remediation with clear SLAs
• Expand security monitoring, visibility, and coverage using existing platforms and
• Open-source tooling
• Program, Metrics & Stakeholder Engagement
• Own the security engineering and operations portion of the Information Security
• Program roadmap, delivering operational metrics, risk-posture data, and capacity
• Analysis
• Establish and report security KPIs to technology and executive leadership on a
• Regular cadence
• Collaborate with the GRC team on ISO 27001 and SOC 2 evidence, control
• Effectiveness, and audit readiness as it relates to security engineering and
• Operations
• Lead technical evaluations of emerging security vendors and technologies; provide
• Buy/build/partner recommendations to technology management
• Represent security engineering and operations in cross-functional product,
• Engineering, and infrastructure initiatives, ensuring security requirements are
• Incorporated by design