Chief SOC & Cyber Defense Leader

CVS Health; Little Rock (AR); On-site; USD 144,000 - 288,000; Full time

Job summary

CVS Health is seeking a Lead Director for the Security Operations Center to direct cybersecurity operations at scale. You will oversee threat monitoring, detection, investigation, response, and threat hunting, aligning SOC capabilities with business priorities and risk tolerance.

You will lead a high-performing team, drive process improvements, and implement automation to strengthen resilience and incident preparedness across cloud, endpoints, and identity platforms.

Qualifications

• 10+ years of progressive cybersecurity experience in medium-large environments.
• 5+ years leading SOC, Incident Response, Cyber Defense, or Threat Detection teams.
• 5+ years operating and optimizing enterprise security platforms (SIEM, EDR/XDR, SOAR) such as Microsoft Sentinel and CrowdStrike Falcon.

Responsibilities

• Lead the Security Operations Center strategy, execution, and continuous improvement.
• Establish SLAs, metrics, and reporting to measure effectiveness and inform decisions.
• Drive improvements in detection engineering, investigations, and incident response workflows.
• Leverage automation and analytics to improve efficiency and cyber defense outcomes.
• Provide leadership and coordination across stakeholders during cybersecurity events and incidents.

Skills

Cybersecurity leadership

Incident response leadership

Threat detection

Education

Bachelor's degree in Cybersecurity/IT/CS/Engineering

Tools

Microsoft Sentinel

CrowdStrike Falcon

SOAR platforms

Job description

CVS Health is seeking a Lead Director for the Security Operations Center to direct cybersecurity operations at scale. You will oversee threat monitoring, detection, investigation, response, and threat hunting, aligning SOC capabilities with business priorities and risk tolerance.

You will lead a high-performing team, drive process improvements, and implement automation to strengthen resilience and incident preparedness across cloud, endpoints, and identity platforms.