Director of Security Operations & Threat Intelligence

Koitecc Solutions; Annapolis (MD); On-site; USD 144,000 - 288,000; Full time

Job summary

CVS Health is seeking a Lead Director of Security Operations Center (SOC) to steer cybersecurity operations for a rapidly evolving healthcare business. You will architect detection, response, and recovery capabilities to protect critical operations and customer data.

You will lead a team of security professionals, define standards, metrics, and processes, and partner with cloud, identity, and engineering teams to strengthen overall security posture.

Qualifications

• 10+ years of progressive cybersecurity experience within medium-large scale environments.
• 5+ years leading Security Operations Center (SOC), Incident Response, Cyber Defense, or Threat Detection teams.
• 5+ years of experience operating and optimizing enterprise security platforms, including SIEM, EDR/XDR, SOAR, and security automation technologies such as Microsoft Sentinel, CrowdStrike Falcon, and Wirespeed.
• 3+ years of demonstrated experience building, managing, and maturing security operations capabilities, including security monitoring, threat hunting, incident response, digital forensics, and security investigations.

Responsibilities

• Lead the strategy, execution, and continuous improvement of the Security Operations Center, including threat monitoring, detection, investigation, response, and threat hunting activities.
• Establish operational processes, service levels, metrics, and reporting to measure effectiveness and support informed decision-making.
• Build and mature SOC capabilities that align security operations to business priorities, risk tolerance, and growth objectives.
• Ensure operational readiness, escalation procedures, and effective coordination during cybersecurity events and incidents.
• Serve as the primary escalation point for significant cyber incidents and coordinate response efforts across technical and business stakeholders.

Skills

Cybersecurity experience

SOC leadership

SIEM/EDR/XDR

Threat detection

Incident response

Education

Bachelor's degree

Tools

Microsoft Sentinel

CrowdStrike Falcon

Wirespeed

Job description

CVS Health is seeking a Lead Director of Security Operations Center (SOC) to steer cybersecurity operations for a rapidly evolving healthcare business. You will architect detection, response, and recovery capabilities to protect critical operations and customer data.

You will lead a team of security professionals, define standards, metrics, and processes, and partner with cloud, identity, and engineering teams to strengthen overall security posture.