Vice President, Threat Detection & Response

About the role

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Vice President, Threat Detection & Response based in United States. This executive role leads the full Threat Detection & Response organization, serving as the strategic owner of a critical cybersecurity function. You’ll oversee Security Operations, Security Analysis, Security Triage, Tactical Response, Detection Engineering, Threat Hunting, and Adversary Tactics. The position is responsible for defining a multi-year vision and translating it into measurable security and business outcomes. You’ll work closely with Product, Engineering, Innovation, Data, Support, and Sales to evolve security operations through automation and agentic technologies. A major focus will be balancing automation with expert human judgment, allowing security teams to concentrate on sophisticated threats and complex intrusion analysis. You’ll also shape organizational design, leadership development, culture, and change management across a high-impact global security function. This is an opportunity for a technically credible cybersecurity executive to transform how threat detection and response scales while strengthening customer protection and business performance.

Responsibilities

• Provide executive leadership across the entire TD&R organization, owning its strategy, structure, operational effectiveness, and measurable outcomes.
• Lead the full Threat Detection & Response organization across Security Operations, Security Analysis, Security Triage, Tactical Response, Detection Engineering & Threat Hunting, and Adversary Tactics.
• Define and execute a long-term TD&R strategy, vision, and operating model aligned with customer needs and broader business objectives.
• Establish clear organizational structures, strategic priorities, resource plans, and measurable outcomes while empowering senior leaders to manage day-to-day execution.
• Drive measurable improvements in mean time to detect and respond, detection coverage, detection quality, operational consistency, and overall security outcomes.
• Partner with Product, Engineering, Innovation, Data, Support, and Sales to develop and execute an agentic Security Operations Center roadmap.
• Identify opportunities to automate repetitive and deterministic investigations while preserving human expertise for complex threat analysis and high-value security decisions.
• Lead major organizational and cultural change initiatives associated with the evolution toward an increasingly automated and agentic security operating model.
• Build a strong culture of transparency, accountability, trust, continuous improvement, and high performance across the organization.
• Identify systemic operational bottlenecks, tooling challenges, workflow friction, and analyst capacity or burnout risks, and develop effective solutions.
• Build and maintain a resilient leadership bench of senior directors and managers capable of leading through high-pressure incidents and complex operational environments.
• Make rapid, informed decisions using frontline security signals, operational data, and emerging threat intelligence to stay ahead of evolving threat actors.
• Own major strategic security initiatives and ensure they deliver meaningful value for customers and the broader business.
• Communicate security strategy, organizational priorities, risks, performance, and outcomes clearly to executive leadership and other key stakeholders.
• Connect security metrics and operational performance to broader business outcomes, including customer retention, efficiency, margin, and growth.

Requirements

• The ideal candidate is a senior cybersecurity leader with deep expertise in modern security operations, threat detection and response, and organizational transformation, combined