Want to know if this job is worth applying to?
Remote, Oregon, United States
Remote only
Most companies run security operations and network operations as separate worlds, with separate teams, separate tools, and separate escalations. At PDI, we're bringing them together.
Our Security & Network Solutions business protects and connects 12,000+ customers across convenience retail, fuel, quick-service restaurants, and automotive. The store networks that keep payments and fuel pumps running are the same networks attackers target. In the first five minutes, a network outage and a security incident often look the same, and our customers expect one team to own both.
We're looking for a senior leader to run our SOC and NOC as one operation: more than 150 people across onshore and offshore teams, delivering 24/7 monitoring, response, and uptime. You'll own how the service is delivered, what it costs, and how it scales, and as part of the SaNS leadership team, you'll help shape where the business goes next.
Lead a converged operation
Lead the SOC, NOC, and Threat Intelligence & Detection functions through about 5 direct reports
Design the operating model: org structure, shift coverage across onshore and offshore teams, and where security and network teams integrate versus stay specialized.
Standardize processes, escalation paths, and playbooks across both domains so customers get one consistent experience.
Own the economics of delivery
Own the operating budget, headcount plan, and tooling and vendor spend.
Improve cost to serve and delivery margin while raising service quality, including the right balance of onshore and offshore delivery.
Provide cost and capacity inputs to pricing, capacity planning, and new service launches.
Deliver security outcomes
Run 24/7 security monitoring, triage, investigation, and response across customer environments.
Through the Threat Intelligence & Detection leader, make sure intelligence drives detection coverage and threat hunting.
Own security incident response for customer environments, from first alert through post-incident review.
Deliver network reliability
Run 24/7 network monitoring and response for site connectivity, uptime, and performance across thousands of locations.
Oversee day-to-day operations for our managed network services (managed firewall, managed switches, SD-WAN, wireless, connectivity)
Manage carrier, ISP, and vendor escalations, change and maintenance windows, and service management practices.
Lead when it matters most
Serve as the single accountable leader for high-severity incidents, whether security, network, or both.
Lead customer and executive communications during major incidents, and drive root-cause fixes that stick.
Modernize operations with automation and AI
Set the multi-year roadmap for SIEM, SOAR, network monitoring, and observability, with one integrated view of security events and network health.
Lead the shift to AI-assisted, automated operations to reduce manual work, alert noise, and response times.
Be the operational voice to customers and the business
Act as executive sponsor for key customers through service reviews, escalations, and strategic discussions.
Partner with Product, Sales, Operations, and Customer Success to shape new offerings and match operations to customer needs.
Run the business on clear metrics: time to detect and respond, uptime and SLA performance, detection coverage, alert quality, customer satisfaction, and cost to serve.
This role leads PDI's customer-facing security and network services.
Required
12+ years in security operations, network operations, or infrastructure operations, including 7+ years in leadership and experience leading leaders (managers of managers).
A track record running a 24/7 operation of 100+ people, ideally across onshore and offshore teams.
Deep experience running a SOC or a NOC, and solid working knowledge of the other. We're open to great leaders from either background, but prefer a security background.
Experience owning an operating budget and improving cost to serve or margin.
Proven major-incident leadership, including executive and customer communications under pressure.
Strong grasp of security operations tooling (SIEM, SOAR, EDR/XDR) and network operations tooling (monitoring, observability, IT service management).
Executive presence with customers and senior leaders, and the ability to explain operational issues in business terms.
Willingness to travel internationally to lead global teams.
Nice to have
Experience at an MSP, MSSP, MDR provider, or managed network services provider (MNSP)
Background in retail, hospitality, payments, or other multi-site environments, including PCI DSS.
Experience leading a converged or integrated SOC and NOC.
Experience building or scaling offshore delivery centers.
A track record of leading automation or AI-driven change in operations.
Familiarity with SOC 2, ISO 27001, and ITIL, plus cloud operations across AWS, Azure, or GCP.
Certifications such as CISSP, CISM, or ITIL are welcome but not required.
A bachelor's degree in a related field or equivalent experience.
