Director, Security Operations & Incident Response

<p style="text-align:left">You desire impactful work.<br> </p><p style="text-align:left"><b>You’re</b> <b>RGA ready</b></p><p style="text-align:inherit"></p><p style="text-align:left">RGA is a purpose-driven organization working to solve today’s challenges through innovation and collaboration. A Fortune 200 Company and listed among its <i>World’s Most Admired Companies</i>, we’re the only global reinsurance company to focus primarily on life- and health-related solutions. Join our multinational team of intelligent, motivated, and collaborative people, and help us make financial protection accessible to all.</p><p style="text-align:inherit"></p><p><b>A Brief Overview</b><br><br>Director of Threat Management is a key leadership position focused on protecting RGA's digital ecosystem. This role requires a leader with deep technical expertise, a solid understanding of threats tactics, tooling, and procedures, as well as defensive security methodologies. The Director will manage a team of Threat Engineers focused on threat detection, threat emulation, threat intelligence, and incident response. This role will collaborate with Incident Response, Threat Management, and other security teams, as well as cross-functional teams.<br><br><br><b>What you will do</b></p><ul><li>Lead and mentor a global team of threat engineers focused one or more of the following disciples; threat detection, threat emulation, threat intelligence, and incident response.</li><li>Supervise all aspects of the team including hiring, training, evaluating, and coaching.</li><li>Foster a culture of technical excellence, collaboration, and continuous improvement</li><li>Manage team training, development, and staffing to ensure readiness for current and emerging threats</li><li>Lead threat engineering efforts that develop, deploy, and operate tools and services that enable the teams ability to detect and responsd to cybersecurity threats</li><li>Collaborate with other Threat Management teams to ensure alignment with strategic objectives and to drive operational effectiveness</li><li>Provide detailed technical insights and recommendations to security leadership.</li><li>Develop and report metrics for reporting at an organizational, company, and/or Executive level.</li></ul><p><br><b>Qualifications</b></p><ul><li>Bachelor’s Degree in Arts/Sciences (BA/BS) in cybersecurity, computer science, or a related field required</li><li>Advanced degree or specialized security certifications preferred</li><li>7+ Years of experience in enterprise security, with a strong focus in one or more of the following disciplines; threat detection, threat emulation, threat intelligence, and incident response. required</li><li>3+ Years of team leadership experience in technical security operations and threat engineering. required</li><li>Hands-on experience with security tools such as SIEM, threat detection platforms, threat emulation, threat intelligence platforms, and advanced analytics. required</li><li>Proven track record of building and improving detection capabilities in complex organizations. required</li><li>Experience managing a global team of engineers and fostering cross time zone collaboration. required</li><li>Advanced knowledge of threat detection technologies and methodologies. required</li><li>Deep understanding of attacker tactics, tools, and techniques. required</li><li>Windows, Mac, and Linux internals required</li><li>Cloud Computing (AWS, Azure, GCP) required</li><li>M365 Suite and Environments required</li><li>Microsoft Domain Environments required</li><li>IAM/AAA technologies and architectures (Active Directory, Okta, OpenID, SAML, Oauth, JWT) required</li><li>Physical and Virtual Networking technologies and architecture required</li><li>SIEM/SOAR technology (Splunk, CrowdStrike, Sentinel, etc) required</li><li>EDR Platforms (CrowdStrike, Microsoft Defender, etc) required</li><li>Offensive Security Tools required</li><li>Relevant certifications such as CISSP, GCIA, SANS Certifications, or equivalent credentials. required</li></ul><p></p><p style="text-align:inherit"></p><p style="text-align:left"><b>What you can expect from RGA:</b></p><ul><li><p style="text-align:left">Gain valuable knowledge from and experience with diverse, caring colleagues around the world.</p></li><li><p style="text-align:left">Enjoy a respectful, welcoming environment that fosters individuality and encourages pioneering thought.</p></li><li><p style="text-align:left">Join the bright and creative minds of RGA, and experience vast, endless career potential.</p></li></ul><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p><span>We’re excited to get to know you and connect your unique skills with our global opportunities. To create a modern and seamless experience, we use artificial intelligence (AI) in parts of our preliminary screening process. This technology helps us personalize job recommendations, automate interview scheduling, evaluate candidates based solely on experience—without considering name, gender, or other personal details—and provide real-time answers through our chatbot. AI is used only during early screening and never makes hiring decisions. Your RGA recruiter will work closely with you every step of the way to ensure the process feels personal, thoughtful, and focused on you.</span></p>

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...