Head of Security & Network Operations

Lead the SOC, NOC, and Threat Intelligence & Detection functions through about 5 direct reports

Design the operating model: org structure, shift coverage across onshore and offshore teams, and where security and network teams integrate versus stay specialized.

Standardize processes, escalation paths, and playbooks across both domains so customers get one consistent experience.

Own the operating budget, headcount plan, and tooling and vendor spend.

Improve cost to serve and delivery margin while raising service quality, including the right balance of onshore and offshore delivery.

Provide cost and capacity inputs to pricing, capacity planning, and new service launches.

Run 24/7 security monitoring, triage, investigation, and response across customer environments.

Through the Threat Intelligence & Detection leader, make sure intelligence drives detection coverage and threat hunting.

Own security incident response for customer environments, from first alert through post-incident review.

Run 24/7 network monitoring and response for site connectivity, uptime, and performance across thousands of locations.

Oversee day-to-day operations for our managed network services (managed firewall, managed switches, SD-WAN, wireless, connectivity)

Manage carrier, ISP, and vendor escalations, change and maintenance windows, and service management practices.

Set the multi-year roadmap for SIEM, SOAR, network monitoring, and observability, with one integrated view of security events and network health.

Lead the shift to AI-assisted, automated operations to reduce manual work, alert noise, and response times.

Act as executive sponsor for key customers through service reviews, escalations, and strategic discussions.

Partner with Product, Sales, Operations, and Customer Success to shape new offerings and match operations to customer needs.

Run the business on clear metrics: time to detect and respond, uptime and SLA performance, detection coverage, alert quality, customer satisfaction, and cost to serve.

12+ years in security operations, network operations, or infrastructure operations, including 7+ years in leadership and experience leading leaders (managers of managers).

A track record running a 24/7 operation of 100+ people, ideally across onshore and offshore teams.

Deep experience running a SOC or a NOC, and solid working knowledge of the other. We're open to great leaders from either background, but prefer a security background.

Experience owning an operating budget and improving cost to serve or margin.

Proven major-incident leadership, including executive and customer communications under pressure.

Strong grasp of security operations tooling (SIEM, SOAR, EDR/XDR) and network operations tooling (monitoring, observability, IT service management).

Executive presence with customers and senior leaders, and the ability to explain operational issues in business terms.

Willingness to travel internationally to lead global teams.

Experience at an MSP, MSSP, MDR provider, or managed network services provider (MNSP)

Background in retail, hospitality, payments, or other multi-site environments, including PCI DSS.

Experience leading a converged or integrated SOC and NOC.

Experience building or scaling offshore delivery centers.

A track record of leading automation or AI-driven change in operations.

Familiarity with SOC 2, ISO 27001, and ITIL, plus cloud operations across AWS, Azure, or GCP.

Certifications such as CISSP, CISM, or ITIL are welcome but not required.

A bachelor's degree in a related field or equivalent experience.