Director of Security Operations (Remote US)

Job description

Atmosera empowers businesses to redefine what's possible with modern technology and human expertise. Our exceptional experience across Applications, Data & AI, DevOps, Security, and the Microsoft Azure platform enables organizations to accelerate innovation, enhance security, and optimize operational agility. As a Microsoft Partner with seven specializations, GitHub AI Partner of the Year, a member of the GitHub Advisory Board, and a member of the prestigious Microsoft Intelligent Security Association (MISA), Atmosera expertly delivers cutting-edge, integrated solutions that deliver business value. The Security team protects Atmosera, our clients, and the platforms we operate. We own our security program, incident response, and the controls that earn customer trust. We partner closely with Engineering, Delivery, and IT and treat security as a team sport. ### Your Impact You are joining us to Atmosera is seeking an experienced Director of Security Operations to lead and continuously mature our Microsoft-native Managed Extended Detection and Response (MXDR) practice. This executive leadership role is responsible for delivering exceptional security operations while driving operational excellence, client satisfaction, service scalability, and business growth. The Director of Security Operations serves as the operational leader of our 24x7x365 Security Operations Center, ensuring consistent, high-quality delivery of managed security services across our client portfolio. This leader is responsible for building repeatable processes, developing high-performing teams, driving automation and AI adoption, and ensuring that every operational decision aligns with Atmosera's strategic business objectives. **Your day-to-day will include:** - Security Operations Leadership - Lead the day-to-day operation of Atmosera's 24x7x365 SOC - Operational Excellence - Continuously improve the maturity, scalability, and consistency of security operations - Managed Security Service Delivery - Own operational delivery of Atmosera's MXDR services - Executive Client Leadership - Serve as the executive operational leader for client-facing security operations. - Microsoft Security Operations - Provide technical leadership across Microsoft's security ecosystem including: Defender XDR, Sentinel, Defender for Cloud, Defender for Endpoint, Defender for Office 365Entra ID Protection, Purview, Security Copilot - Incident Response & Threat Operations - Lead operational readiness for incident response - Strategic Security Operations - Align Security Operations with Atmosera's Strategic Security Program supporting frameworks including: NIST CSF, Microsoft Cloud Security Benchmark (MCSB), ISO 27--1, Mitre Attack - Team Leadership & Talent Development - Recruit, develop, mentor, and retain high-performing security professionals - Business & Operational Performance - Understand the financial drivers of managed security services - Metrics, Reporting & Continuous Improvement - Establish and monitor operational KPIs including: SLA/SLO attainment, MTTD, MTTR, Analyst utilization, Automation adoption, Client satisfaction, Operational efficiency, Alert quality, Secure posture improvement, Service profitability Success in this role requires significantly more than technical cybersecurity expertise. The ideal candidate possesses exceptional operational maturity, executive presence, strong situational awareness, and sound business judgment. They understand that security operations exist to reduce client risk while simultaneously improving operational efficiency, strengthening client trust, and enabling sustainable business growth. ### What Success Looks Like We measure success by results and alignment. Here is how we define a “win” for this role: **After 90 Days** Complete onboarding, shadow active engagements, and produce a written audit of current Security workflows with three prioritized opportunities. **After 6 Months** Own and ship one cross-functional initiative end-to-end that demonstrates the value of the Director of Security Operations role. **After 1 Year** Deliver a 20%+ improvement in a primary Security KPI and codify a repeatable playbook adopted across teams. ### The Skill Matrix **Required Qualifications (Day-One Non-Negotiables)** **Role-Specific Mastery** - 8+ years in Cybersecurity - 5+ years leading enterprise Security Operations or Managed Security Services - Operational Excellence — Demonstrated ability to run repeatable processes with strong attention to detail and a bias toward documentation. - Communication — Skilled at translating complex topics into clear updates for technical and non-technical audiences alike. - Collaboration — Comfortable working seamlessly across remote, cross-functional teams to keep work aligned and momentum high. - Problem Solving — Uses data and customer signal to identify root causes and propose scalable, high-impact solutions. **Preferred Qualifications (Bonus Points)** - Preferred Certifications: CISSP, CIS<, CCSP, Microsoft Certified Cybersecurity Architect Expert, Microsoft Certified Security Operations Analyst, Microsoft Certified Identity and Access Administrator, ITIL Foundation or ITL Managing Professional ### How We Show Up These 'Core Three' represent the heartbeat of Atmosera. They are the behaviors and attributes we align to every day, defining how we interact, solve problems, and celebrate our wins together. This is simply who we are at our best. **Humble** - Low Ego, High Impact - We share credit easily, admit when we're wrong, and view every mistake as a data point for growth. **Hungry** - Internal Drive - We have a natural bias for action. We don't wait for permission to solve a problem or find a better way to do things. **Mindful** - Intentional Awareness - We are conscious of our impact on the team. We listen more than we speak and respond to challenges with empathy and situational awareness. ### Our Interview Process - Talent Screen (30 mins) — A conversation about your background and the role mission. - The Impact & Attributes Assessment (60 mins w/ our CISO) — The "How" — Cultural DNA and The Core Three. - Collaborator Loop (45-60 mins w/ 2 peers) — The "What" — Required Skills and Core Capabilities. May include a presentation or work sample. - Final Alignment (2 hours w/ our Exec Team) — Closing case & conversation with Leadership.\* \*An additional step may be added due to the strategic nature of this position