10318 - Cyber Defense Head of Department (HOD)

Company Overview:

• →

  Oversee 24x7 SOC operations, ensuring effective monitoring, detection, and response to security events, across levels 1-3. 

• →

  Drive continuous enhancement of detection engineering, threat hunting, and security analytics. 

• →

  Implement best-in-class security tooling, automation, and operational processes. 

• Lead internal Red Team and offensive security capabilities, including penetration testing. 

• Define testing methodologies, operational rules of engagement, and reporting standards. 

• Translate offensive findings into actionable improvements for defensive teams and architecture. 

• Oversee the Incident Response program, ensuring rapid and effective handling of security incidents. 

• Lead tabletop exercises, simulation drills, and readiness assessments. 

• Facilitate and lead high/critical incident responses, when the Incident Response Manager is unavailable. Coordinate with legal, communications, and executive stakeholders during major incidents. 

• Own the enterprise-wide vulnerability management strategy, including prioritization, remediation, and reporting. 

• Drive continuous scanning, assessment, and metrics to reduce risk across infrastructure, applications, and cloud environments. 

• Collaborate with engineering and operations teams to ensure timely and effective remediation. 

• Facilitate and the zero-day vulnerability response process, when the Incident Response Manager is unavailable.  

• Lead the organization’s AppSec program, including secure SDLC practices, code reviews, SAST/DAST tools, and developer enablement. 

• Partner with software engineering to embed security into product and platform design. 

• Develop and run adversary simulation programs that mimic real-world threat actors. 

• Use intelligence-led scenarios to evaluate detection capabilities, response effectiveness, and organizational resilience. 

Basic Qualifications:

• Experience & Leadership: 10+ years of progressive experience across the various cyber defense disciplines (SOC, Incident Response, Red/Blue teams, or similar defensive/offensive functions.) Proven experience leading cyber defense teams. Demonstrated ability to hire, mentor, and lead high-performing technical teams. 

• Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science or a related discipline. 

• Technical Expertise: Strong knowledge of threat detection, incident response, adversary tactics (MITRE ATT&CK), vulnerability management, and secure software development. 

• Availability: In the absence of IR team members, utilize a flexible work schedule to facilitate the security incident response process for high/critical incidents. 

Preferred Qualifications:

• Education and Certifications: Master's degree in Cybersecurity, Information Technology, Computer Science or a related discipline is preferred. Industry-recognized credentials such as CISSP, CISM, OSCP/OSCE, GIAC (GSEC, GCIA, GCIH, GPEN, GXPN) are highly desirable.  

• Framework Experience: Familiarity with, and prior participation with FIRST (Forum of Incident Response and Security Teams) is preferred. 

• Language Skills: Bi-lingual in English and Korean language proficiency is preferred to support global coordination and communication. 

• Proven experience collaborating with global teams across diverse regions and cultures, building strong cross-functional partnerships.

Team Culture: 

The team fosters a high-performance, collaborative environment centered around proactive cybersecurity defense and excellent customer service. Members are expected to lead with accountability, communicate effectively across functions, and adapt to dynamic challenges. The culture values technical excellence, continuous improvement, and global coordination, ensuring readiness and resilience in the face of evolving threats.  

• Collaborative Leadership: Team members lead cross-functional service delivery efforts, coordinating with internal stakeholders, MSSPs, and external partners to drive delivery of services and maintain transparency.  

• Continuous Improvement & Accountability: The team regularly adjusts the Information Security strategy and roadmap in alignment with customer needs, changing threat landscape and industry trends.