Chief Security Operations Center & Incident Response

CVS Health; Raleigh (NC); On-site; USD 144,000 - 288,000; Full time

Job summary

CVS Health is seeking a Lead Director - Security Operations Center to guide cybersecurity operations for a rapidly evolving healthcare business. You will ensure effective detection, investigation, response and recovery from threats, while building mature SOC capabilities aligned with business priorities.

Lead cross-functional efforts across cloud, identity and platform security, drive automation and analytics, and provide strategic risk insights to senior leadership.

Qualifications

• 10+ years of progressive cybersecurity experience within medium-large environments.
• 5+ years leading SOC, Incident Response, Cyber Defense, or Threat Detection teams.
• 5+ years operating and optimizing enterprise security platforms, including SIEM, EDR/XDR, SOAR, and security automation such as Microsoft Sentinel, CrowdStrike Falcon, and Wirespeed.
• 3+ years building, managing, and maturing security operations capabilities, including security monitoring, threat hunting, incident response, digital forensics, and security investigations.

Responsibilities

• Lead the strategy, execution, and continuous improvement of the SOC, including threat monitoring, detection, investigation, response, and threat hunting.
• Establish operational processes, service levels, metrics, and reporting to measure effectiveness and support decision-making.
• Build and mature SOC capabilities aligned to business priorities, risk tolerance, and growth.
• Lead incident escalation and coordinate response across technical and business stakeholders.
• Drive improvements in detection engineering, investigation processes, and response workflows.
• Provide leadership visibility into threat activity, performance, risks, and strategic recommendations.

Skills

Cybersecurity

SOC Leadership

Threat Detection

Incident Response

Security Automation

Cloud Security

Regulatory Awareness

Education

Bachelor's degree in Cybersecurity, IT, CS, Engineering or related field

Tools

Microsoft Sentinel

CrowdStrike Falcon

Wirespeed

SIEM

EDR/XDR

SOAR

Job description

CVS Health is seeking a Lead Director - Security Operations Center to guide cybersecurity operations for a rapidly evolving healthcare business. You will ensure effective detection, investigation, response and recovery from threats, while building mature SOC capabilities aligned with business priorities.

Lead cross-functional efforts across cloud, identity and platform security, drive automation and analytics, and provide strategic risk insights to senior leadership.