Chief SOC & Cyber Defense Leader

CVS Health; Dover (DE); On-site; USD 144,000 - 288,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Lead Director - Security Operations Center (SOC) to oversee cybersecurity operations for a large healthcare business. You will lead threat monitoring, incident response, and resilience initiatives, ensuring detection, investigation, response, and recovery capabilities align with business priorities.

You will build and mentor a high-performing team, advance automation and analytics, partner with cloud, identity, and engineering teams, and report risks and performance to

Qualifications

• Minimum 10+ years in cybersecurity in medium-large environments.
• 5+ years leading SOC, IR, cyber defense, or threat detection teams.
• 5+ years operating and optimizing enterprise security platforms (SIEM, EDR/XDR, SOAR, security automation).
• 3+ years building and maturing security operations capabilities including monitoring, threat hunting, IR, forensics, and investigations.

Responsibilities

• Lead SOC strategy, execution, and continuous improvement across threat monitoring, detection, investigation, response, and hunting.
• Establish processes, SLAs, metrics, and reporting to measure effectiveness and guide decisions.
• Build mature SOC capabilities aligned to business priorities and risk tolerance.
• Coordinate cyber incident response with technical and business stakeholders.

Skills

SOC leadership

Threat detection

Incident response

Security automation

Cybersecurity strategy

Education

Bachelor's degree in Cybersecurity/IT/CS/Engineering

Tools

Microsoft Sentinel

CrowdStrike Falcon

Wirespeed

SIEM

EDR/XDR

SOAR

Job description

CVS Health is seeking a Lead Director - Security Operations Center (SOC) to oversee cybersecurity operations for a large healthcare business. You will lead threat monitoring, incident response, and resilience initiatives, ensuring detection, investigation, response, and recovery capabilities align with business priorities.

You will build and mentor a high-performing team, advance automation and analytics, partner with cloud, identity, and engineering teams, and report risks and performance to