Suggested rewrite: Led a cross-functional initiative that improved [business outcome] by [measurable result], demonstrating experience relevant to this role...
Director of Security Operations and Engineering
Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move.
- Remote from
- USA
- Salary
- Undisclosed
- Department
- Cybersecurity
- Employment
- Full Time
- Experience
- Director
- Published
- Apply before
- 17 Nov 2026
- Listing views
- 54
- Application actions
- 2
Make your next move.
Prepare your resume, explore your fit, and draft a cover letter for this opportunity.
The role, at a glance.
EDB is seeking a senior security leader to own and scale both Security Operations and Security Engineering, reporting directly to the CISO. The role leads incident response, detection engineering, threat hunting, preventive control design, and the security platforms supporting SIEM, EDR, SOAR, cloud security, and identity assurance. This director will build teams, operating rhythms, vendor strategy, automation capabilities, and an acquisition-security integration program in a fast-growing remote-first company. Success requires translating technical risk into business impact and partnering closely with Legal, HR, IT, Product, and GRC leaders.
Role DNA
A quick view of the complexity, pace, ownership and collaboration implied by the job description.
Pace & Pressure
5/5Autonomy Level
5/5Communication Load
5/5Salary analysis
Estimated compensation compared with the broader US market for similar roles.
Core skills
Skills and capabilities most closely associated with this opportunity.
Sample interview questions
I would start by establishing reliable incident intake, severity criteria, telemetry coverage, and post-incident reviews. Trends from investigations and threat hunting would drive a prioritized control roadmap focused on identity hardening, least privilege, secure build systems, and automated guardrails. I would measure reduction in recurring incident classes, detection-to-containment time, and the percentage of high-volume work eliminated through automation.
I would define clear ownership, escalation paths, communications protocols, and evidence-handling procedures first. Next, I would align staffing, on-call coverage, tooling, and playbooks to the highest-risk services and business processes. Regular exercises, after-action reviews, and measurable service objectives would ensure the function scales consistently rather than relying on individual heroics.
I frame the risk in terms of business impact, likelihood, affected assets, decision options, cost, and residual risk. I avoid unnecessary technical detail while keeping the explanation precise enough to support an informed decision. I then provide a clear recommended path, accountable owners, milestones, and a mechanism for tracking progress.
I would first identify repetitive, well-bounded tasks such as alert enrichment, evidence collection, ticket triage, and playbook execution. Automation should preserve human approval for consequential decisions, use tightly scoped permissions, and maintain auditable logs. I would validate quality through pilots and track false-positive reduction, analyst time saved, and incident-response outcomes.
I would perform an early risk assessment covering identity, endpoints, cloud accounts, logging, vulnerabilities, data flows, and critical third parties. Based on the findings, I would create a phased integration plan that addresses urgent exposure immediately while sequencing longer-term alignment with EDB standards. Clear executive sponsorship, shared milestones, and practical support for the acquired team are essential to completing the integration without disrupting the business.
About this role.
A Little About Us
EDB provides a data and AI platform that enables organizations to harness the full power of Postgres for transactional, analytical, and AI workloads across any cloud, anywhere. EDB empowers enterprises to control risk, manage costs and scale efficiently for a data and AI led world. Serving more than 1,500 customers globally and as the leading contributor to the vibrant and fast-growing PostgreSQL community, EDB supports major government organizations, financial services, media and information technology companies. EDB’s data-driven solutions enable customers to modernize legacy systems and break data silos while leveraging enterprise-grade open source technologies. EDB delivers the confidence of up to 99.999% high availability with mission critical capabilities built in such as security, compliance controls, and observability. For more information, visit www.enterprisedb.com
The Role:
You’ll lead Security Operations and Security Engineering at EDB, reporting to the CISO as a trusted member of the security leadership team. You own how we detect, respond, and (increasingly) prevent. That means the people, the platforms, and the playbooks behind threat detection, incident response, and the engineering that makes them scale.
You’ll be a peer to the leaders across security, including Governance, Risk & Compliance and Application Security & Vulnerability Management, and you’ll help shape the direction of the broader InfoSec organization. You’ll also partner closely with peer leaders in IT and Product, because most of the controls we define live in their systems, pipelines, and roadmaps. This is a scaling role. The business is growing fast, and so is everything security has to cover: more products, more cloud, more acquired companies and environments to bring up to a common standard. You’ll decide what to build, what to automate, and where to add people, so the program grows ahead of the risk instead of behind it. As EDB grows, so will the scope and opportunity of the role.
One leader owns both Security Operations and Security Engineering on purpose: the best incident is the one that never happens. What we learn from detection and response feeds directly into the engineering of preventive controls, so we move from detecting bad things to making them impossible, and from manual triage to automation and agents that give analysts leverage. If you want to build that, and grow a program and a team as the company grows, this is the seat.
What your impact will be:
- Incident response end to end, from intake and severity model through after-action and improvement, including partnership with Legal on investigations
- Detection engineering, threat hunting, and the SIEM, EDR, SOAR, and cloud security platforms that support them
- Security Engineering strategy and delivery, with the goal of preventing incidents rather than responding to them: preventive controls, least privilege, and identity assurance across employees, contractors, and build systems
- The insider threat program, built with HR, Legal, and IT
- Automation and agentic AI that extends analyst capacity (the analyst always owns the decision)
- Security integration of acquired companies and new environments into EDB’s standards
- Close partnership with IT and Product leadership to build preventive controls into the platforms, pipelines, and products they own, plus security input to third-party risk and device posture with GRC
- Scaling the program: the org design, operating rhythms, roadmap, budget, and vendor strategy that let coverage grow with the business without growing linearly with headcount
What you will bring:
- 5+ years of management experience leading security teams
- 7+ years of hands-on experience in security operations, incident response, detection, or security engineering
- A track record of scaling a security function through rapid growth (hiring, automation, and operating discipline), not just running one
- Strategic thinking that goes beyond the immediate scope of the role
- The ability to translate technical risk into business impact for executives, legal, customers, and your IT and Product counterparts
- Comfort in a global, remote-first environment with flexible schedules and on-call responsibilities
What will give you an edge:
- Hands-on scripting or automation experience (Python, Go, etc.)
- Experience applying AI or agent-based automation to security workflows
- Cloud security experience and background in M&A security integration
- Experience building an insider threat or identity assurance program
EDB is committed to supporting our employees’ overall well being by offering a range of benefits and resources to promote a healthy work-life balance and wellness. We provide access to CuraLinc to aid employees in health and wellness tips and practices, as well as Wellness Fridays extending to December 2026! Check out our career site for more information on perks and benefits and reach out to our Talent Acquisition team for region specific benefits.
We know it takes a unique mix of people and skills to help us in our mission to supercharge Postgres, and we understand that not everyone will check every box. We’d love to hear from you and we want you to apply!
EDB is proud to be an equal opportunity workplace. We celebrate diversity and are committed to creating an inclusive environment for all employees. EDB was built on a commitment to trust and respect each other and to embrace an array of people and ideas. These values remain at the center of our culture and are key to our company’s integrity.
EDB does not seek or accept unsolicited resumes or CVs from recruitment agencies. EDB and its affiliates are not responsible for, and will not pay, any fees, commissions, or any other similar payment related to unsolicited resumes or CVs except as required in a written signed agreement between EDB and the recruitment agency or party requesting payment of a fee.
#LI-Remote
Annual salary information is not provided for this position. Explore salary ranges for similar roles in our Salary Directory ›
This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.
Apply now.
Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.
Continue on the employer website
Protect your personal information and never pay to secure an interview or job offer. .
