Security Operations Tech Lead

Verily Health; Haynes; On-site; GBP 130,000 - 146,000; Full time

Benefits offered by this job

Immigration support

Job summary

Verily Health Inc. is seeking a Security Operations Tech Lead to advance cloud detection and response across GCP and AWS. You will blend security expertise with SRE practices to build scalable, cost-efficient protections for health data and cloud infrastructure.

You will own telemetry pipelines, guide threat hunting, and mentor engineers while collaborating with platform and product teams to implement robust security controls. This is a hands-on technical leadership role.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or equivalent practical experience.
• 8+ years of professional experience in security engineering, site reliability engineering, platform engineering, or security operations with production cloud systems.
• Deep technical expertise securing GCP or AWS, with a focus on IAM, VPC networking, cloud logging, and containerized workloads.
• Hands-on experience developing security detection logic, investigating threats, and engineering security telemetry within an enterprise SIEM or modern analytics platform.
• Experience with Infrastructure as Code (e.g., Terraform), CI/CD pipelines, distributed systems troubleshooting, and production observability.

Responsibilities

• Design, test, deploy, and continuously improve detections for complex cloud threats across multi-cloud environments.
• Drive proactive threat hunting and cloud asset discovery to identify visibility gaps and prioritize detections.
• Own end-to-end telemetry pipelines for cloud logs, balancing investigative value, retention, and cost.
• Apply SRE principles to telemetry and detection services with SLOs/SLIs, alerts, and recovery procedures.
• Develop IaC and automated workflows to reduce toil and enforce code review and CI/CD practices.

Skills

Security engineering

Site Reliability Engineering

Cloud security

Threat hunting

Automation

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or equivalent

Tools

GCP

AWS

Terraform

CI/CD

Kubernetes

CrowdStrike

Job description

About Verily Health Inc.

At the intersection of technology, data science, and healthcare, Verily Health transforms complex health data into trusted intelligence, enabling health solutions that are more personal, predictive, and precise.

About Verily Health Inc.

At the intersection of technology, data science, and healthcare, Verily Health transforms complex health data into trusted intelligence, enabling health solutions that are more personal, predictive, and precise. Verily’s flagship Governed Health Intelligence platform, Verily Pre, enables healthcare organizations to responsibly govern, model, and securely activate their protected health data at scale, deploying intelligence with the scientific rigor, oversight, and auditability needed for healthcare.

Description

The Security Operations Tech Lead will advance our cloud detection and response capabilities across Google Cloud Platform (GCP) and AWS. In this role, you will combine deep security expertise with software engineering and site reliability engineering practices to build reliable, scalable, and cost-efficient systems that protect our cloud infrastructure, applications, and sensitive health data.

As a hands‑on technical leader within Security Operations, you will shape our cloud detection strategy, develop high‑throughput security telemetry pipelines, and automate investigation and response workflows. You will partner closely with Cloud Infrastructure, Platform, and Product Engineering teams to turn an understanding of our systems and emerging threats into robust security controls. This individual contributor role offers broad technical ownership, cross‑functional initiative leadership, and the opportunity to mentor engineers across the organization.

Responsibilities

• Design, test, deploy, and continuously improve detections for complex cloud threats, including identity and access abuse, suspicious application activity, data exposure, and container and Kubernetes attacks.
• Drive proactive threat hunting and cloud asset discovery initiatives to identify visibility gaps and prioritize detection coverage across multi‑cloud environments.
• Own end‑to‑end telemetry pipelines that collect, parse, normalize, and enrich cloud audit, network, and application logs, balancing investigative value, retention, data protection, and cost efficiency.
• Apply Site Reliability Engineering (SRE) principles to telemetry and detection services, establishing SLOs/SLIs for data freshness, availability, and completeness while building actionable alerting, recovery procedures, and capacity plans.
• Develop software, Infrastructure as Code (IaC), and automated workflows to reduce manual toil and technical debt, enforcing code review, automated testing, version control, and CI/CD deployment practices for detection content.

Minimum Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or equivalent practical experience.
• 8+ years of professional experience in security engineering, site reliability engineering, platform engineering, or security operations with production cloud systems.
• Deep technical expertise securing Google Cloud Platform (GCP) or Amazon Web Services (AWS), with a strong focus on IAM, VPC networking, cloud logging, and containerized workloads.
• Hands‑on experience developing security detection logic, investigating threats, and engineering security telemetry within an enterprise SIEM or modern analytics platform.
• Demonstrated experience with Infrastructure as Code (e.g., Terraform), CI/CD pipelines, distributed systems troubleshooting, and production observability.

Preferred Qualifications

• Advanced expertise with native GCP security services (Cloud Audit Logs, VPC Flow Logs, Security Command Center Enterprise, Cloud Armor) alongside multi‑cloud operations across AWS and Azure.
• Hands‑on experience engineering high‑volume log ingestion pipelines, custom parsers, and threat detections using CrowdStrike Falcon Next‑Gen SIEM, Humio/LogScale, or modern big data platforms (BigQuery, Snowflake).
• Experience designing and implementing security controls within healthcare, life sciences, or heavily regulated environments subject to HIPAA, NIST frameworks, or CIS benchmarks.
• Proven experience securing Kubernetes clusters (GKE/EKS), container runtimes, web applications, and AI/ML workloads incorporating Large Language Models (LLMs).

This role is eligible for Verily-sponsored immigration support.

The US base salary range for this full‑time position is $174,500 - $196,000 + bonus + benefits. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job‑related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, or benefits.

Verily Health Inc is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here.

If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.