📅 Jul 17
Lead defensive cybersecurity operations by guiding a Blue Team, overseeing incident monitoring and response, supporting critical investigations, and improving security processes, playbooks, and performance.
Head of Security & Network Operations
🕒 9 days ago
Security OperationsNetwork OperationsSOCNOC
📜 Description
- Lead SOC, NOC, and Threat Intelligence & Detection functions across onshore and offshore teams.
- Design integrated operating models, staffing coverage, processes, escalation paths, and playbooks.
- Own operating budgets, headcount, tooling and vendor spend, and delivery cost and margin.
- Oversee 24/7 security monitoring, incident response, network monitoring, and managed network services.
- Lead major-incident response and customer and executive communications; drive lasting root-cause fixes.
- Set roadmaps for SIEM, SOAR, network monitoring, observability, automation, and AI-assisted operations.
🛠️ Requirements
- 12+ years in security operations, network operations, or infrastructure operations, including 7+ years in leadership and experience leading leaders (managers of managers).
- A track record running a 24/7 operation of 100+ people, ideally across onshore and offshore teams.
- Deep experience running a SOC or a NOC, and solid working knowledge of the other. We're open to great leaders from either background, but prefer a security background.
- Experience owning an operating budget and improving cost to serve or margin.
- Proven major-incident leadership, including executive and customer communications under pressure.
- Strong grasp of security operations tooling (SIEM, SOAR, EDR/XDR) and network operations tooling (monitoring, observability, IT service management).
- Executive presence with customers and senior leaders, and the ability to explain operational issues in business terms.
- Willingness to travel internationally to lead global teams.
- Experience at an MSP, MSSP, MDR provider, or managed network services provider (MNSP)
- Background in retail, hospitality, payments, or other multi-site environments, including PCI DSS.
✨ Benefits
- Competitive salary
- Market-competitive benefits
- Quarterly perks program
- Ample time off
- Hybrid working arrangements where appropriate
- Continuous learning and professional certifications
- Leadership development opportunities
Full job description
At PDI Technologies, we empower some of the world's leading convenience retail and petroleum brands with cutting-edge technology solutions that drive growth and operational efficiency. By “Connecting Convenience” across the globe, we empower businesses to increase productivity, make more informed decisions, and engage faster with customers through loyalty programs, shopper insights, and unmatched real-time market intelligence via mobile applications, such as GasBuddy. We’re a global team committed to excellence, collaboration, and driving real impact. Explore our opportunities and become part of a company that values diversity, integrity, and growth.
Most companies run security operations and network operations as separate worlds, with separate teams, separate tools, and separate escalations. At PDI, we're bringing them together.
Our Security & Network Solutions business protects and connects 12,000+ customers across convenience retail, fuel, quick-service restaurants, and automotive. The store networks that keep payments and fuel pumps running are the same networks attackers target. In the first five minutes, a network outage and a security incident often look the same, and our customers expect one team to own both.
We're looking for a senior leader to run our SOC and NOC as one operation: more than 150 people across onshore and offshore teams, delivering 24/7 monitoring, response, and uptime. You'll own how the service is delivered, what it costs, and how it scales, and as part of the SaNS leadership team, you'll help shape where the business goes next.
Why this role stands out
What you'll own
Lead a converged operation
Lead the SOC, NOC, and Threat Intelligence & Detection functions through about 5 direct reports
Design the operating model: org structure, shift coverage across onshore and offshore teams, and where security and network teams integrate versus stay specialized.
Standardize processes, escalation paths, and playbooks across both domains so customers get one consistent experience.
Own the economics of delivery
Own the operating budget, headcount plan, and tooling and vendor spend.
Improve cost to serve and delivery margin while raising service quality, including the right balance of onshore and offshore delivery.
Provide cost and capacity inputs to pricing, capacity planning, and new service launches.
Deliver security outcomes
Run 24/7 security monitoring, triage, investigation, and response across customer environments.
Through the Threat Intelligence & Detection leader, make sure intelligence drives detection coverage and threat hunting.
Own security incident response for customer environments, from first alert through post-incident review.
Deliver network reliability
Run 24/7 network monitoring and response for site connectivity, uptime, and performance across thousands of locations.
Oversee day-to-day operations for our managed network services (managed firewall, managed switches, SD-WAN, wireless, connectivity)
Manage carrier, ISP, and vendor escalations, change and maintenance windows, and service management practices.
Lead when it matters most
Serve as the single accountable leader for high-severity incidents, whether security, network, or both.
Lead customer and executive communications during major incidents, and drive root-cause fixes that stick.
Modernize operations with automation and AI
Set the multi-year roadmap for SIEM, SOAR, network monitoring, and observability, with one integrated view of security events and network health.
Lead the shift to AI-assisted, automated operations to reduce manual work, alert noise, and response times.
Be the operational voice to customers and the business
Act as executive sponsor for key customers through service reviews, escalations, and strategic discussions.
Partner with Product, Sales, Operations, and Customer Success to shape new offerings and match operations to customer needs.
Run the business on clear metrics: time to detect and respond, uptime and SLA performance, detection coverage, alert quality, customer satisfaction, and cost to serve.
This role leads PDI's customer-facing security and network services.
What success looks like
What you bring
Required
12+ years in security operations, network operations, or infrastructure operations, including 7+ years in leadership and experience leading leaders (managers of managers).
A track record running a 24/7 operation of 100+ people, ideally across onshore and offshore teams.
Deep experience running a SOC or a NOC, and solid working knowledge of the other. We're open to great leaders from either background, but prefer a security background.
Experience owning an operating budget and improving cost to serve or margin.
Proven major-incident leadership, including executive and customer communications under pressure.
Strong grasp of security operations tooling (SIEM, SOAR, EDR/XDR) and network operations tooling (monitoring, observability, IT service management).
Executive presence with customers and senior leaders, and the ability to explain operational issues in business terms.
Willingness to travel internationally to lead global teams.
Nice to have
Experience at an MSP, MSSP, MDR provider, or managed network services provider (MNSP)
Background in retail, hospitality, payments, or other multi-site environments, including PCI DSS.
Experience leading a converged or integrated SOC and NOC.
Experience building or scaling offshore delivery centers.
A track record of leading automation or AI-driven change in operations.
Familiarity with SOC 2, ISO 27001, and ITIL, plus cloud operations across AWS, Azure, or GCP.
Certifications such as CISSP, CISM, or ITIL are welcome but not required.
A bachelor's degree in a related field or equivalent experience.
Similar jobs
Search more Security Operations Analyst jobs
Director of Global Security Operations
🕒 7 days ago
MongoDB👥 10,000+ employees🏢 Software Development🤝 B2B
🕒 7 days ago
Build and lead a 20-person India-based security operations team, establishing its operating model and developing capabilities across vulnerability management, launch readiness, and enterprise security.
🕒 17 days ago
Leads and grows the security operations team, owning incident response, vulnerability and patch management, security tooling, compliance controls, and resilient practices while remaining hands-on and partnering across the organization.
📍 🇨🇦 British Columbia - Hybrid💰 C$126k - C$137k / year💼 Full-Time🎙️ Leadership🌎 Security Operations Analyst
📅 Sep 16
Build and lead Radiant’s security function across data centres, compute and network infrastructure, setting strategy and tooling while representing security to customers and owning incident response and resilience.
📅 Sep 2
Build and lead Skylo’s 24/7 security operations function, establishing detection, incident response, threat intelligence, and SOC processes across satellite, cloud, data center, and enterprise environments.