• Lead, mentor, and develop a blended IDR team (IR, SOC operations, threat detection, and security tooling engineers) • Lead cyber incident investigations across the environment and oversee root cause analysis • Lead the design and operation of detection capabilities aligned with compliance requirements and risk appetite • Oversee the development of threat models and provide guidance on improving cyber defense posture • Execute and oversee a process of a data driven methodology for measuring cyber defense effectiveness • Coordinate cross-functional response activities with IT infrastructure, applications, OT/ICS teams, legal, HR, communications, and other stakeholders • Establish and track metrics to measure defense effectiveness, report outcomes and trends to leadership