Director, Security Operations – Incident Response

Reinsurance Group of America, Incorporated

Director of Security Operations leading a global team to protect RGA’s digital ecosystem and manage cybersecurity threats. Collaborating with cross-functional teams and providing technical insights for improved security operations.

Posted 7/8/2026full-timeRemote • 🇮🇪 IrelandLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in threat detection, threat emulation, and incident response, with a strong focus on team leadership and development in cybersecurity. Proficient in managing global teams and fostering collaboration across time zones while utilizing advanced security tools and methodologies.

Highest-signal resume keywords

Threat DetectionTeam LeadershipSecurity Tools ManagementCloud ComputingAdvanced Security Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat DetectionThreat EmulationIncident ResponseAdvanced AnalyticsWindows InternalsMac InternalsLinux InternalsIAM/AAA TechnologiesPhysical Networking TechnologiesVirtual Networking Technologies

Soft Skills

MentoringCollaborationCoachingContinuous ImprovementTechnical Excellence

Tools & Technologies

SIEMThreat Detection PlatformsThreat Intelligence PlatformsM365 SuiteMicrosoft Domain EnvironmentsCloud Computing (AWS, Azure, GCP)EDR PlatformsOffensive Security ToolsSIEM/SOAR TechnologyAdvanced Analytics

Certifications & Qualifications

CISSPGCIASANS Certifications

Industry Keywords

CybersecurityThreat ManagementSecurity OperationsTechnical SecurityGlobal Team Management

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformLinuxSplunk

About the role

Key responsibilities & impact

Lead and mentor a global team of threat engineers focused one or more of the following disciples; threat detection, threat emulation, threat intelligence, and incident response.
Supervise all aspects of the team including hiring, training, evaluating, and coaching.
Foster a culture of technical excellence, collaboration, and continuous improvement.
Manage team training, development, and staffing to ensure readiness for current and emerging threats.
Lead threat engineering efforts that develop, deploy, and operate tools and services that enable the teams ability to detect and respond to cybersecurity threats.
Collaborate with other Threat Management teams to ensure alignment with strategic objectives and to drive operational effectiveness.
Provide detailed technical insights and recommendations to security leadership.
Develop and report metrics for reporting at an organizational, company, and/or Executive level.

Requirements

What you’ll need

Bachelor’s Degree in Arts/Sciences (BA/BS) in cybersecurity, computer science, or a related field required
Advanced degree or specialized security certifications preferred
7+ Years of experience in enterprise security, with a strong focus in one or more of the following disciplines; threat detection, threat emulation, threat intelligence, and incident response required
3+ Years of team leadership experience in technical security operations and threat engineering required
Hands-on experience with security tools such as SIEM, threat detection platforms, threat emulation, threat intelligence platforms, and advanced analytics required
Proven track record of building and improving detection capabilities in complex organizations required
Experience managing a global team of engineers and fostering cross time zone collaboration required
Advanced knowledge of threat detection technologies and methodologies required
Deep understanding of attacker tactics, tools, and techniques required
Windows, Mac, and Linux internals required
Cloud Computing (AWS, Azure, GCP) required
M365 Suite and Environments required
Microsoft Domain Environments required
IAM/AAA technologies and architectures (Active Directory, Okta, OpenID, SAML, Oauth, JWT) required
Physical and Virtual Networking technologies and architecture required
SIEM/SOAR technology (Splunk, CrowdStrike, Sentinel, etc) required
EDR Platforms (CrowdStrike, Microsoft Defender, etc) required
Offensive Security Tools required
Relevant certifications such as CISSP, GCIA, SANS Certifications, or equivalent credentials required.

Benefits

Comp & perks

Gain valuable knowledge from and experience with diverse, caring colleagues around the world.
Enjoy a respectful, welcoming environment that fosters individuality and encourages pioneering thought.
Join the bright and creative minds of RGA, and experience vast, endless career potential.
Artificial intelligence (AI) used in parts of the preliminary screening process for personalized job recommendations and scheduling.