Boldyn Networks Group Operations Us

Director of Cyber Operations

Always On. Always Secure. Globally Connected.

About the role

Are you passionate about building and leading world-class security operations capabilities at scale? The Director of Cyber Operations is accountable for the day‑to‑day effectiveness and ongoing maturity of Boldyn’s global cyber security operations function. This is a small team environment, so the role blends hands‑on technical delivery with operational leadership: you’ll set the operating model, drive automation and standardization, and personally provide escalation support when needed. You will ensure consistent monitoring, detection, and response across global markets.

Working closely with internal IT, cloud, network, and engineering teams, you will also govern and manage third‑party Managed Security Service Providers (MSSPs) to deliver measurable security outcomes.

What you’ll be doing

• Own the global Cyber Operations operating model and ensure effective 24x7 monitoring and response (delivered via internal teams and MSSPs) across markets/environments.
• Act as named operational owner for monitoring, logging, detection, and incident management controls; ensure design, operation, testing/validation, continuous control-health monitoring, remediation tracking, and audit evidence (e.g., ISO 27001 / Cyber Essentials+).
• Set telemetry standards and govern SOC architecture (SIEM/XDR, logging pipelines, case management), ensuring consistent onboarding and coverage across environments.
• Own detection engineering and SOAR automation outcomes: use‑case lifecycle (design/validate/tune/retire) plus automation at scale (e.g., Sentinel playbooks, case management, enrichment/integrations) to reduce alert fatigue and improve MTTD/MTTR.
• Provide hands‑on technical escalation support (including threat hunting where needed) and contribute to priority detections/playbooks in a small‑team environment.
• Own incident response end‑to‑end: define severity/escalation and communications, lead major incidents, and drive PIRs/root‑cause analysis and problem management through corrective actions and readiness improvements.
• Govern MSSP performance and stakeholder engagement: run monthly service reviews with the business, track KPIs/SLAs, translate risk and performance into clear actions, and drive continual improvement.

What you’ll bring

• Deep expertise in Azure security, cloud and network architectures, including security maturity assessments, gap analysis, and governance alignment.
• Strong security operations leadership experience, including managing 24x7 monitoring/response services, major incident response leadership, and delivering outcomes across the Microsoft Security stack and Azure Sentinel.
• Hands‑on experience with detection engineering, threat hunting, log analytics, and Kusto Query Language (KQL).
• Proven experience managing third‑party security service providers (MSSP/MDR): contract/SOW management, KPI/SLA definition, monthly service review cadence, and clear risk/performance communication to agree priorities and drive corrective actions.
• Proven ability to design and implement SOAR use cases, including automation, malware sandboxing, and service desk integrations within Azure Sentinel.
• Experience with log source onboarding, data normalization, schema design, data quality assurance, and operational reporting (metrics/dashboarding), including use of the Microsoft Power Platform.
• Solid understanding of threat actor TTPs, supported by frameworks such as MITRE ATT&CK, Cyber Kill Chain, NIST SP 800-137, and SANS Security Operations.
• Ability to define, measure, and interpret operational performance metrics, KPIs, and control effectiveness, and build operational maturity through governance, RACI, runbooks/playbooks, continuous improvement, and validation (e.g., PIRs, problem management, control validation).
• Knowledge of security monitoring across IT and OT environments, including device types and infrastructure connectivity.
• Experience applying threat deception and active defense techniques to enhance detection and response capabilities.
• Relevant Azure, SOC, and Security Engineering certifications are beneficial but not required (e.g., SC‑100, SC‑200, AZ‑500, PL‑300, SBT L1/2, SANS DFIR, MITRE ATT&CK).

About us

At Boldyn Networks, we’re reimagining the future of interconnectivity. Our network solutions are solving some of tomorrow’s greatest challenges. We are one team across the globe. Always listening. Learning. We value different perspectives and challenge each other to be our best. Here, you can change lives today and create a better tomorrow.

Why work with us

We’re large enough to deliver and maintain large‑scale operations, giving you the opportunity to work on exciting projects and expand your skills. You’ll be surrounded by talented colleagues who thrive on solving problems, just like you. Together, you’ll make your mark on projects that matter and find new strengths along the way.

We also offer

• Salary: $130,000 - $150,000
• Annual Bonus: 15%
• Learning & development opportunities
• Flexible working opportunities
• Competitive benefit packages
• Paid Parental Leave
• Vacation starting at 15 days increasing with length of service
• 10 days paid sick leave
• 4 days off each year to volunteer

Diversity recognizes the ways we differ. Our backgrounds, perspectives and experiences are what make us unique. And it’s important to us, to our future. To build a workforce that’s representative of the societies we serve. So that we can listen, learn, and understand how to solve our customers’ problems in the smartest ways possible.

Our employees describing Boldyn Networks in one word...