Director, Proactive Defense Operations

What you'll do

• Own the PDO roadmap, delivery, service performance, budget, vendors, and team across both operational pillars.
• Direct threat prioritization, exposure triage, escalation SLAs, automation architecture, and interfaces with Detection Engineering, SecOps/IR, and Vulnerability Management.
• Report performance and risk to leadership, develop capability metrics, and promote responsible use of approved AI tools.

What they ask for

• Bachelor’s degree in cybersecurity, computer science, information technology, or a related discipline, or equivalent related experience.
• 12+ years of cyber security experience, including experience in security operations, detection engineering, or security data science.
• Experience with SIEM/SOAR platforms, telemetry pipelines, detection rule frameworks such as YARA-L or Sigma, and end-to-end ownership of a cyber security capability.
• Leadership or people management experience with technical or specialist teams, plus experience managing budgets, suppliers, and delivery commitments.

Nice to have

• CISSP, CISM or equivalent senior security certification; expert-level proficiency in MITRE ATT&CK and Cyber Kill Chain operationalization.
• Experience with enterprise automation, intelligence-to-defense operations, AI/ML in security workflows, or regulated industries and GxP environments.

Pay

USD $168,750 to $281,250 annual base salary

Tools

SIEM, security data lake, SOAR, Threat Intelligence Platform, YARA-L, Sigma, MITRE ATT&CK, Cyber Kill Chain

AI focus

Lead the team in using approved AI tools to improve productivity and ways of working, following GSK’s Responsible AI, privacy, and security requirements. Preferred experience includes AI/ML integration in security workflows, including generative AI for detection logic drafting and NLP-driven telemetry querying.