Director, Threat Detection & Response

North- Remote, US

North is seeking a Director of Threat Detection and Response to serve as a key cybersecurity and technical leader. You will be responsible for defining the strategy and building the capabilities of our Incident Response, Detection Engineering, Threat Hunting, and Cyber Threat Intelligence.

As the leader of this highly technical group, you will oversee the prevention, detection, and response to complex cybersecurity threats targeting North's payment processing infrastructure. You will manage a team of deeply experienced experts, ensuring the team maintains the highest technical standards in cloud, network, endpoint, and identity security, while acting as the ultimate escalation point for executive leadership during critical incidents.

What you'll do

• Serve as the senior incident commander and ultimate escalation point during major, high-severity security incidents.
• Direct the organization's incident response strategy, ensuring rapid triage, containment, eradication, and recovery across endpoint, network, cloud, identity, and application layers.
• Oversee comprehensive digital forensics and root cause analysis, driving cross-team remediation of systemic gaps and mitigating fraud or financial loss.
• Direct the strategy for detection engineering, ensuring the team develops, tunes, and validates high-fidelity detection logic.
• Lead proactive, hypothesis-driven threat hunting programs based on incident trends and the MITRE ATT&CK framework to uncover undetected compromises.
• Build and integrate a Cyber Threat Intelligence to proactively identify and counter emerging adversary TTPs relevant to the payments industry.
• Drive the strategy and buildout of the company's enterprise logging and data pipelines, ensuring comprehensive visibility across cloud and on-premises environments to power high-fidelity detection and rapid investigations.
• Manage, mentor, and develop a high-performing team of senior incident responders, detection engineers, and threat hunters.
• Translate complex technical findings and incident outcomes into clear, actionable narratives for North's executive leadership and board of directors.

What we need from you

• Bachelor's degree in Computer Science, Cyber Security or related field, or combination of education and experience.
• 10+ years of hands-on information security experience, with deep subject-matter expertise in incident response, detection engineering, and threat hunting.
• Hands-on expertise managing complex security incidents, advanced threat hunting, and detection engineering across modern environments (cloud, identity, network, endpoint).
• Demonstrated track record in a leadership role overseeing complex security operations and high-performing technical teams.
• Proficiency with advanced Incident Response tools, digital forensic protocols, log analysis techniques, and managing detection rules in modern platforms.
• Strong expertise in log management and telemetry, including designing and overseeing log collection architectures and data pipelines across complex cloud and on-premises environments.
• Expertise in navigating the intersection of AI and cybersecurity, with specific experience investigating attacks on AI agents, countering AI-facilitated threats, and integrating AI agents into incident response workflows.
• Architectural understanding of internal AI and agentic infrastructure, ensuring the secure deployment, monitoring, and incident readiness of in-house models and autonomous agent networks.
• Solid understanding of cloud infrastructure (AWS, Azure, GCP), Windows/Linux systems, and modern identity platforms.
• Familiarity with the payments/fintech regulatory environment, including working knowledge of PCI-DSS.
• Excellent communication skills, with a proven ability to brief executive leadership, legal, and compliance teams during high-pressure situations.

Preferred Certifications

• GIAC Certified Forensic Analyst (GCFA)
• GIAC Certified Incident Handler (GCIH)
• GIAC Network Forensic Analyst (GNFA)
• GIAC Cyber Threat Intelligence (GCTI)
• Offensive Security Certified Professional (OSCP)
• Offensive Security Incident Response (OSIR)
• CompTIA CySA+

Salary Range: $175,000- $235,000

Pay within this range varies by work location and on job-related knowledge, skills, and experience. We look forward to discussing your salary expectations and our full total rewards offerings throughout the interview process.

What we offer

We offer a comprehensive benefits package that enables our teams to live a life well lived, both personally and professionally. Some of our perks include:

• Medical, Dental, & Vision Coverage
• Flexible Paid Time Off
• 401(k) + Match
• Mental Health Support & Well-Being Program
• Paid Maternity & Paternity Leave
• Education Assistance
• Company-funded Lifestyle Spending Account

• Please note: North is a US based company and this role is not eligible for current or future sponsorship.
• Let's go North, together.

• Join our mission to build the largest suite of credit card processing and merchant services.
• It's one simple payment platform backed by the most diverse payment companies.
• From credit card processing to back-office management, North points the way to smarter, faster, and just plain better payment solutions.