Director Of Security Operations

About the role

As BWE’s Director of Security Operations (SecOps), you are the senior hands-on security expert accountable for the engineering and operational effectiveness of BWE’s security program. You lead a three-person security team as a player-coach, staying deep in the technology yourself, leading incident response, tuning platforms, and making the technical calls. You protect an environment of over 600 users, 700 endpoints, and 30 office locations across a best-of-breed security stack layered over Microsoft 365 and Azure and delivered with an MDR partner, in a regulated commercial real estate finance business examined by GSEs, rating agencies, and clients.

Responsibilities

• Lead a team of three security professionals as an active technical contributor, setting standards, reviewing work directly, coaching, and stepping into complex technical issues.
• Own, configure, tune, and troubleshoot BWE’s security stack, taking platforms beyond implementation into measurable coverage and enforced controls.
• Evaluate the security tool portfolio for coverage, overlap, and cost, and recommend consolidation or retirement.
• Own detection and response outcomes, including alert quality, tuning, escalation, and vendor accountability.
• Set detection, logging, and telemetry standards across cloud, SaaS, endpoint, identity, and data platforms, and turn threat intelligence into actionable detections and hunts.
• Serve as security incident commander from triage through recovery and post-incident review, building and rehearsing playbooks and taking part in the security on-call rotation.
• Drive vulnerability management from discovery and prioritization through remediation and verification, supported by asset inventory and attack surface management.
• Set security architecture standards for cloud, SaaS, infrastructure, applications, and data platforms, and define security-by-design requirements for new technology.
• Implement and operate data protection controls for confidential financial information, including classification, encryption, retention enforcement, and data loss monitoring.
• Maintain secure SDLC practices for internally developed applications, including code scanning standards, software supply chain security, and application security assessments.
• Assess and monitor the security of third parties based on the sensitivity of the data and access involved, including due diligence and contractual security requirements.
• Lead cyber risk assessment activities, including penetration tests, tabletop exercises, CIS control and identity reviews, and social engineering, driving findings to closure.
• Partner with the Chief Digital Officer and Compliance on information security policies and standards, and own the technical standards and procedures that implement them.
• Maintain BWE’s alignment to NIST CSF and CIS Controls