Senior Director of Cyber Defense
Description
The Senior Director, Cyber Defense is responsible for Entrata’s information security defenses, cyber defense strategy, and incident response program. This role leads the capabilities required to detect, investigate, contain, and recover from security events across Entrata’s technology environment.
The Senior Director partners with leaders across Security, Technology, Engineering, Infrastructure, Product, Compliance, Legal, and Communications to strengthen Entrata’s security posture and operational resilience. This role establishes the processes, technology, communication channels, and cross-functional discipline necessary to respond effectively to cyber threats while ensuring appropriate coverage across regions and time zones.
Responsibilities
-
Define and execute Entrata’s cyber defense strategy and multi-year operational roadmap aligned with enterprise risk. Serve as Incident Commander for significant security incidents—coordinating technical response, triage, containment, eradication, recovery, and business decisions.
-
Lead detection, alerting, and investigation across the technology stack. Create and maintain incident response playbooks, runbooks, severity levels, decision rights, regional time-zone handoffs, and escalation paths.
-
Serve as the frontline executive interface for enterprise clients during active incidents, delivering transparent technical briefings, root-cause analyses (RCAs), and post-incident remediation updates. Partner with Legal, Privacy, Communications, and Customer Success on crisis messaging.
-
Establish and present strategic cyber metrics, threat assessments, and operational maturity benchmarks to executive leadership, audit committees, and board stakeholders.
-
Drive continuous maturity across threat detection and response to align with enterprise compliance frameworks, regulatory standards, and third-party audit requirements while making timely, risk-based decisions in high-stress environments.
-
Proactively leverage approved GenAI tools to automate routine tasks while serving as the "Human-in-the-Loop" to audit outputs, maintain prompt competency, and enforce strict data governance and PII protection protocols.
Minimum Qualifications
- 10–15 years of progressive, relevant experience in cybersecurity, security operations (SOC), incident response, or cyber defense.
-
Proven track record leading enterprise security operations, incident response, or cyber defense programs.
-
Expert-level incident command and incident response skills in high-stakes environments.
-
Demonstrated experience in direct, customer-facing executive engagement and client briefings during high-severity incidents.
-
Demonstrated background building or maturing SOC/IR organizations within enterprise environments subject to rigorous audit, compliance, and governance controls.
-
Deep, comprehensive understanding of information security principles, threat vectors, controls, technologies, and operating models.
-
Exceptional executive-level communication, crisis management, workload prioritization, and decision-making capabilities under pressure.
Preferred Qualifications
- Active executive security credentials such as CISSP, CISM, CISA, or GIAC (GCIH, GCFA).
-
Experience leading cyber defense and incident command within multi-tenant, cloud-native SaaS platforms (AWS, Azure, GCP).
-
Hands-on leadership implementing security automation (SOAR), modern SIEM/XDR analytics, threat intelligence, and proactive threat hunting programs (e.g., MITRE ATT&CK framework).
-
In-depth familiarity with SOC 2 Type II, ISO 27001, NIST CSF, FedRAMP, GDPR, and CCPA regulatory environments.
-
Master’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
AI & Operational Fluency
-
AI Integration: Proactively leverages company-approved GenAI tools to automate routine tasks and accelerate high-value deliverables.
-
Strategic Oversight: Functions as the "Human-in-the-Loop," taking full accountability for auditing AI outputs for factual accuracy, brand alignment, and the removal of hallucinations.
-
Data Governance: Adheres strictly to AI security protocols, ensuring no proprietary or Personally Identifiable Information (PII) data is exposed to unauthorized models.
-
Prompt Competency: Demonstrates the ability to craft clear, context-rich prompts to achieve consistent, high-quality results across various business domains.
Skills
As published by lever · 14 questions · 2 written answers
Basics
Resume/CV, Full name, Pronouns, Email, Phone, Current location, Current company, LinkedIn URL, GitHub URL, Portfolio URL
Short answers (2)
- What is your preferred name?
- What is your desired yearly compensation?
Pick from a list (10)
- How did you learn about this position? optional
- Which state do you currently live in? optional
- Do you now, or will you in the future, require sponsorship to legally work in the United States? ( Non US resident status will not automatically rule out further consideration in the recruitment process.)
- Do you have any signed agreements regarding competition with your current employer or with a previous employer?
- If you answered "Yes" to the question above, are you willing to provide Entrata with a copy of these non-compete agreements?
- Have you worked for an Entrata customer in the past 120 days?
- Have you worked for Entrata in the past?
- Do you have any relatives currently employed by Entrata? Relatives would include a spouse or civil union partner, parents, stepparents, foster parents, father-in-law, mother-in-law, children, stepchildren, foster children, sons-in-law, daughters-in-law, grandparents, grandchildren, brothers, sisters, brothers-in-law, sisters-in-law, aunts, uncles, nieces, nephews, and first cousins. (Entrata maintains a Nepotism and Dating Policy to ensure fairness and prevent potential conflicts in the workplace. This question is asked solely for the purpose of enforcing that policy)
- Are you currently using AI tools or technologies professionally?
- Are you able to work onsite at our HQ in Lehi, UT? (This is a hybrid role)
Written answers (2)
- If you answered "Yes" to having a relative currently employed at Entrata, please share who they are what your relation to them is. optional
- If yes, please briefly describe how you’ve used AI in your work and the impact it had.