{"id":3839710,"url":"https://alion.io/job/accelerant-director-security-operations","title":"Director, Security Operations","company":{"id":669028,"name":"Accelerant","domain":"accelerant.ai","url":"https://alion.io/company/accelerant","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":{"grade":"C","score":63,"open_postings":21,"ghost_share":0.619,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"head","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"AWS","optional":true},{"name":"Cloudflare","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-11-05T21:01:01Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-07T01:26:06Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":1},"description":"About Accelerant\nAccelerant is a data-driven risk exchange connecting underwriters of specialty insurance risk with risk capital providers. Accelerant was founded in 2018 by a group of longtime insurance industry executives and technology experts who shared a vision of rebuilding the way risk is exchanged - so that it works better, for everyone. The Accelerant risk exchange does business across more than 20 different countries and 250 specialty products, and we are proud that our insurers have been awarded an AM Best A- (Excellent) rating. For more information, please visit www.accelerant.ai.\nAccelerant is hiring a Director, Security Operations: a senior team lead who owns the work that calls for security judgment and will report directly to the Chief Information Security Officer (CISO). This is a senior, hands-on role: you set technical direction for the security operations team, stay close to the work, and act as the CISO’s trusted deputy for technical security and security operations, including changes in the threat landscape, vulnerabilities and incidents.\nYou are responsible for the strategic direction of our technical security operations, controls and processes. That includes assessing the security of mergers and acquisitions, owning the penetration test cycle, coordinating purple team exercises and SOC coordination, and acting as the technical expert for projects. You’ll have the autonomy to drive technical initiatives from concept to delivery.\nKey responsibilities\nThe Director, Security Operationsowns the high-judgment security work and is accountable for results in five areas.\nM&A security\nLead security due diligence and post-close integration assessments as deal volume grows.\nBuild and maintain a repeatable integration playbook: assessment checklist, risk scoring, remediation plan and day-one controls.\nWrite clear risk narratives and recommendations for the CISO and deal teams.\nTesting, detection and operations\nLead the penetration test cycle: scoping, triage, remediation tracking and reporting to leadership.\nOwn the SOC sync across Accelerant and Mission US/UK: shared priorities, escalation paths, handoffs and coverage gaps.\nOwn the detection platform strategy, including Microsoft Sentinel cost and ingestion, without losing detection coverage.\nIncident response and control improvement\nAct as incident response manager for technical incidents, leading the response from triage through to resolution.\nOwn the technical incident response playbooks and keep them current.\nLead lessons-learned reviews after incidents and recommend control changes, tracked through to completion.\nRun control reviews and recommend improvements where gaps appear.\nAct as the internal escalation point for the external SOC, advising on potential incidents that need more judgment.\nTechnical leadership and vendors\nBuild and lead the security engineering team: partner with the CISO to hire direct reports, then provide line management and technical direction, including assigning work, reviewing output and coaching.\nManage the security tooling and service vendors in this area, including the full vendor lifecycle: selection, renewals, performance and escalations.\nStep into hands-on engineering and investigation work when the team needs it.\nRequired qualifications\nCandidates typically bring 6 to 9 years of security engineering experience.\nBreadth across cloud security, network security and detection engineering, with depth in Azure and Microsoft Sentinel.\nExperience leading incident response for technical incidents, including post-incident reviews.\nExperience assessing the security of acquisitions.\nFamiliarity with modern identity and authentication, including passkeys and privileged access.\nExperience hiring, line-managing and developing security engineers.\nAble to write a clear risk narrative and present it to leadership.\nSound judgment on ambiguous problems, and good prioritization across competing demands.\nExperience managing security vendor relationships.\nWilling to stay close to the technical work: this is not a pure management role.\nPreferred qualifications\nThese strengthen an application but are not required. Prior exposure to M&A security integration is the strongest differentiator.\nExperience assessing acquisition targets or integrating acquired companies, including building repeatable playbooks.\nExperience running a recurring penetration testing or automated pentest program and driving remediation.\nExperience coordinating a SOC or managed detection provider across multiple entities or regions.\nExperience with Microsoft Sentinel and SIEM cost optimization.\nExperience securing AWS environments and working with Cloudflare.\nExperience rolling out phishing-resistant authentication such as passkeys or FIDO2.\nCertifications such as CISSP, CISM, GIAC, AZ-500 or SC-200.\nExperience in insurance, financial services or another regulated industry.","description_format":"text","description_chars":4908,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["InsurTech"],"lifecycle":[{"event":"open","at":"2026-11-05T22:12:08Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-11-06T22:30:08+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":1,"age_days":0,"expected_fill_days":41,"reasons":["conf:2","stale_co","win:early"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/accelerant-director-security-operations","json_url":"https://alion.io/job/accelerant-director-security-operations.json","meta":{"generated_at":"2026-11-07T01:37:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4025,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":669028},"rest":"https://alion.io/mcp/rest/get_company?id=669028"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faccelerant-director-security-operations"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faccelerant-director-security-operations"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faccelerant-director-security-operations"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/accelerant-director-security-operations\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faccelerant-director-security-operations"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3839710}},{"tool":"search_jobs","arguments":{"company":"accelerant.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3839710},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}