The posting
Always On. Always Secure. Globally Connected.
Director of Cyber Operations
About the role
Are you passionate about building and leading world-class security operations capabilities at scale? The Director of Cyber Operations is accountable for the day-to-day effectiveness and ongoing maturity of Boldyn’s global cyber security operations function. This is a small team environment, so the role blends hands-on technical delivery with operational leadership: you’ll set the operating model, drive automation and standardization, and personally provide escalation support when needed. You will ensure consistent monitoring, detection, and response across global markets. Working closely with internal IT, cloud, network, and engineering teams, you will also govern and manage third-party Managed Security Service Providers (MSSPs) to deliver measurable security outcomes.
What you’ll be doing
As part of the global cyber security team, you’ll play a critical role in protecting Boldyn’s national telecommunications infrastructure. Colleagues across IT, cloud, network, and market engineering teams will rely on your technical expertise, leadership, and ability to continuously improve security operations processes and outcomes. It’s a role with significant variety and global impact, and day‑to‑day you’ll be involved in the following areas:
- Own the global Cyber Operations operating model and ensure effective 24x7 monitoring and response (delivered via internal teams and MSSPs) across markets/environments.
- Act as named operational owner for monitoring, logging, detection, and incident management controls; ensure design, operation, testing/validation, continuous control-health monitoring, remediation tracking, and audit evidence (e.g., ISO 27001 / Cyber Essentials+).
- Set telemetry standards and govern SOC architecture (SIEM/XDR, logging pipelines, case management), ensuring consistent onboarding and coverage across environments.
- Own detection engineering and SOAR automation outcomes: use-case lifecycle (design/validate/tune/retire) plus automation at scale (e.g., Sentinel playbooks, case management, enrichment/integrations) to reduce alert fatigue and improve MTTD/MTTR.
- Provide hands-on technical escalation support (including threat hunting where needed) and contribute to priority detections/playbooks in a small-team environment.
- Own incident response end-to-end: define severity/escalation and communications, lead major incidents, and drive PIRs/root-cause analysis and problem management through corrective actions and readiness improvements.
- Govern MSSP performance and stakeholder engagement: run monthly service reviews with the business, track KPIs/SLAs, translate risk and performance into clear actions, and drive continual improvement.
What you’ll bring
Think you could make a difference here? We’re looking for someone who genuinely cares about the welfare of our team. You’ll want to make an impact from day one. With big ideas about how to improve our culture and the knowledge to get people on board. You will also have some of the following:
- Deep expertise in Azure security, cloud and network architectures, including security maturity assessments, gap analysis, and governance alignment
- Strong security operations leadership experience, including managing 24x7 monitoring/response services, major incident response leadership, and delivering outcomes across the Microsoft Security stack and Azure Sentinel
- Hands-on experience with detection engineering, threat hunting, log analytics, and Kusto Query Language (KQL)
- Proven experience managing third-party security service providers (MSSP/MDR): contract/SOW management, KPI/SLA definition, monthly service review cadence, and clear risk/performance communication to agree priorities and drive corrective actions
- Proven ability to design and implement SOAR use cases, including automation, malware sandboxing, and service desk integrations within Azure Sentinel
- Experience with log source onboarding, data normalization, schema design, data quality assurance, and operational reporting (metrics/dashboarding), including use of the Microsoft Power Platform
- Solid understanding of threat actor TTPs, supported by frameworks such as MITRE ATT&CK, Cyber Kill Chain, NIST SP 800‑137, and SANS Security Operations
- Ability to define, measure, and interpret operational performance metrics, KPIs, and control effectiveness, and build operational maturity through governance, RACI, runbooks/playbooks, continuous improvement, and validation (e.g., PIRs, problem management, control validation)
- Knowledge of security monitoring across IT and OT environments, including device types and infrastructure connectivity
- Experience applying threat deception and active defense techniques to enhance detection and response capabilities
- Relevant Azure, SOC, and Security Engineering certifications are beneficial but not required (e.g., SC‑100, SC‑200, AZ‑500, PL‑300, SBT L1/2, SANS DFIR, MITRE ATT&CK)
About us
At Boldyn Networks, we’re reimagining the future of interconnectivity. Our network solutions are solving some of tomorrow’s greatest challenges. We are one team across the globe. Always listening. Learning. We value different perspectives and challenge each other to be our best. Here, you can change lives today and create a better tomorrow.
Why work with us?
We’re large enough to deliver and maintain large-scale operations, giving you the opportunity to work on exciting projects and expand your skills. You’ll be surrounded by talented colleagues who thrive on solving problems, just like you. Together, you’ll make your mark on projects that matter and find new strengths along the way.
We also offer:
- Salary: $130,000 - $150,000
- Annual Bonus: 15%
- Learning and development opportunities
- Flexible working opportunities
- Competitive benefit packages
- Paid Parental Leave
- Vacation starting at 15 days increasing with length of service
- 10 days paid sick leave
- 4 days off each year to volunteer
Ready to apply?
Are you ready to create an impact that will last for generations? Join us at Boldyn Networks today. Hit apply and follow the instructions to get started.
Diversity recognizes the ways we differ. Our backgrounds, perspectives and experiences are what make us unique. And it’s important to us, to our future. To build a workforce that’s representative of the societies we serve. So that we can listen, learn, and understand how to solve our customers’ problems in the smartest ways possible.
