Director, Threat Detection & Response

Posted Yesterday
Be an Early Applicant
Hiring Remotely in US
Remote
175K-235K Annually
Expert/Leader
eCommerce • Fintech • Payments • Software • Financial Services
Join our mission to build the largest suite of credit card processing and merchant services.
The Role
Leads the strategy and execution of incident response, detection engineering, threat hunting, and cyber threat intelligence. Serves as senior incident commander, oversees digital forensics and root cause analysis, builds enterprise logging and telemetry pipelines, and manages complex cloud, network, endpoint, identity, and application security operations. The role manages senior technical teams, addresses AI-related cyber threats, and briefs executive leadership during critical incidents.
Summary Generated by Built In

Director, Threat Detection & Response

North- Remote, US


North is seeking a Director of Threat Detection and Response to serve as a key cybersecurity and technical leader. You will be responsible for defining the strategy and building the capabilities of our Incident Response, Detection Engineering, Threat Hunting, and Cyber Threat Intelligence.


As the leader of this highly technical group, you will oversee the prevention, detection, and response to complex cybersecurity threats targeting North's payment processing infrastructure. You will manage a team of deeply experienced experts, ensuring the team maintains the highest technical standards in cloud, network, endpoint, and identity security, while acting as the ultimate escalation point for executive leadership during critical incidents.


What you'll do:

  • Serve as the senior incident commander and ultimate escalation point during major, high-severity security incidents.
  • Direct the organization's incident response strategy, ensuring rapid triage, containment, eradication, and recovery across endpoint, network, cloud, identity, and application layers.
  • Oversee comprehensive digital forensics and root cause analysis, driving cross-team remediation of systemic gaps and mitigating fraud or financial loss.
  • Direct the strategy for detection engineering, ensuring the team develops, tunes, and validates high-fidelity detection logic.
  • Lead proactive, hypothesis-driven threat hunting programs based on incident trends and the MITRE ATT&CK framework to uncover undetected compromises.
  • Build and integrate a Cyber Threat Intelligence to proactively identify and counter emerging adversary TTPs relevant to the payments industry.
  • Drive the strategy and buildout of the company's enterprise logging and data pipelines, ensuring comprehensive visibility across cloud and on-premises environments to power high-fidelity detection and rapid investigations.
  • Manage, mentor, and develop a high-performing team of senior incident responders, detection engineers, and threat hunters.
  • Translate complex technical findings and incident outcomes into clear, actionable narratives for North's executive leadership and board of directors.

What we need from you:

  • Bachelor's degree in Computer Science, Cyber Security or related field, or combination of education and experience.
  • 10+ years of hands-on information security experience, with deep subject-matter expertise in incident response, detection engineering, and threat hunting.
  • Hands-on expertise managing complex security incidents, advanced threat hunting, and detection engineering across modern environments (cloud, identity, network, endpoint).
  • Demonstrated track record in a leadership role overseeing complex security operations and high-performing technical teams.
  • Proficiency with advanced Incident Response tools, digital forensic protocols, log analysis techniques, and managing detection rules in modern platforms.
  • Strong expertise in log management and telemetry, including designing and overseeing log collection architectures and data pipelines across complex cloud and on-premises environments.
  • Expertise in navigating the intersection of AI and cybersecurity, with specific experience investigating attacks on AI agents, countering AI-facilitated threats, and integrating AI agents into incident response workflows.
  • Architectural understanding of internal AI and agentic infrastructure, ensuring the secure deployment, monitoring, and incident readiness of in-house models and autonomous agent networks.
  • Solid understanding of cloud infrastructure (AWS, Azure, GCP), Windows/Linux systems, and modern identity platforms.
  • Familiarity with the payments/fintech regulatory environment, including working knowledge of PCI-DSS.
  • Excellent communication skills, with a proven ability to brief executive leadership, legal, and compliance teams during high-pressure situations.

Preferred Certifications: 

  • GIAC Certified Forensic Analyst (GCFA)
  • GIAC Certified Incident Handler (GCIH)
  • GIAC Network Forensic Analyst (GNFA)
  • GIAC Cyber Threat Intelligence (GCTI)
  • Offensive Security Certified Professional (OSCP)
  • Offensive Security Incident Response (OSIR)
  • CompTIA CySA+

Salary Range: $175,000- $235,000


Pay within this range varies by work location and on job-related knowledge, skills, and experience. We look forward to discussing your salary expectations and our full total rewards offerings throughout the interview process.

What we offer: 

We offer a comprehensive benefits package that enables our teams to live a life well lived, both personally and professionally. Some of our perks include:

  • Medical, Dental, & Vision Coverage
  • Flexible Paid Time Off
  • 401(k) + Match
  • Mental Health Support & Well-Being Program
  • Paid Maternity & Paternity Leave
  • Education Assistance
  • Company-funded Lifestyle Spending Account

Please note: North is a US based company and this role is not eligible for current or future sponsorship.


Let’s go North, together. 


Join our mission to build the largest suite of credit card processing and merchant services. It’s one simple payment platform backed by the most diverse payment companies. From credit card processing to back-office management, North points the way to smarter, faster, and just plain better payment solutions.

Who we are: 

North, and our family of companies, are committed to helping entrepreneurs grow their businesses. As an end-to-end payment solutions company, we provide everything business owners need to get paid, whether they serve customers in a physical storefront, online, or both. We pride ourselves on being large enough to offer customized solutions to our enterprise-level clients while remaining agile enough to take an award-winning, hands-on approach to personal service that our merchants won’t find anywhere else.


Let’s go North, together! Our most important resource is our people. Join our diverse team of innovators and do-ers and make your mark on the future of payments technology. We're proud to offer benefits that help our team members further their overall well-being through unique initiatives that are both personally and professionally fulfilling. 


At North, we celebrate diversity and create an inclusive environment for everyone. We are an equal opportunity employer.


To learn more about North, and our family of companies, visit our website: north.com

Skills Required

  • Bachelor's degree in Computer Science, Cyber Security, or a related field, or equivalent combination of education and experience
  • 10+ years of hands-on information security experience
  • Deep expertise in incident response, detection engineering, and threat hunting
  • Experience managing complex security incidents across cloud, identity, network, and endpoint environments
  • Leadership experience overseeing complex security operations and high-performing technical teams
  • Proficiency with incident response tools, digital forensics, log analysis, and detection rule management
  • Expertise designing log collection architectures and telemetry data pipelines across cloud and on-premises environments
  • Experience investigating attacks on AI agents, countering AI-facilitated threats, and integrating AI agents into incident response workflows
  • Architectural understanding of internal AI and agentic infrastructure
  • Understanding of AWS, Azure, GCP, Windows/Linux systems, and modern identity platforms
  • Familiarity with payments and fintech regulatory requirements, including PCI-DSS
  • Excellent communication skills with experience briefing executive, legal, and compliance teams
  • GIAC Certified Forensic Analyst (GCFA)
  • GIAC Certified Incident Handler (GCIH)
  • GIAC Network Forensic Analyst (GNFA)
  • GIAC Cyber Threat Intelligence (GCTI)
  • Offensive Security Certified Professional (OSCP)
  • Offensive Security Incident Response (OSIR)
  • CompTIA CySA+
Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: Troy, MI
1,300 Employees
Year Founded: 1992

What We Do

NorthAB, LLC (North) and its subsidiaries are committed to helping entrepreneurs grow their businesses. As an end-to-end payment solutions company, we provide everything business owners need to get paid, whether they serve customers in a physical storefront, online, or both. We pride ourselves on being large enough to offer customized solutions to our enterprise-level clients while remaining agile enough to take an award-winning, hands-on approach to personal service that our merchants won’t find anywhere else. At North, we point the way to smarter, faster, and just plain better payment solutions. Let’s go North, together!

Why Work With Us

At North, we put a clear focus on team member well-being, both personally and professionally. We offer Flexible PTO and Work by Choice policies (i.e. work remotely, in office, or hybrid) that create the flexibility our team members need to do their best work.

Gallery

Gallery

Similar Jobs

Liberty Mutual Insurance Logo Liberty Mutual Insurance

Inside Sales Representative

Artificial Intelligence • Fintech • Insurance • Marketing Tech • Software • Analytics
Remote or Hybrid
15 Locations
40000 Employees
45K-85K Annually

Shield AI Logo Shield AI

Capture Manager

Aerospace • Artificial Intelligence • Machine Learning • Robotics • Software • Defense Technology
Remote
USA
280K-420K Annually

Headway Logo Headway

Senior Engineering Manager

Consumer Web • Healthtech • Professional Services • Social Impact • Software
Remote
USA
819 Employees
265K-332K Annually

Headway Logo Headway

Vendor Operations Lead, CX

Consumer Web • Healthtech • Professional Services • Social Impact • Software
Remote
USA
819 Employees
95K-140K Annually

Similar Companies Hiring

Ford Energy Thumbnail
Automotive • Software • Energy • Utilities • Manufacturing • Renewable Energy
Glendale, Kentucky
55 Employees
Revel Thumbnail
Aerospace • Hardware • Robotics • Software
Marina Del Rey, California
70 Employees
Blee Thumbnail
Artificial Intelligence • Marketing Tech • Software
New York, New York
30 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account