Head of Security Operations Center & Cyber Defense

CVS Health; Denver (CO); On-site; USD 144,000 - 288,000; Full time

Benefits offered by this job

Medical, dental, vision

Bonus program

Stock options

Job summary

CVS Health is seeking a Lead Director of Security Operations Center to guide cybersecurity operations across the enterprise. You will lead threat monitoring, investigation, response, and hunting while aligning security with business priorities and risk posture.

This role drives standardization, automation, and metrics, partnering with cloud, identity, and engineering teams to strengthen overall security posture and resilience.

Qualifications

• 10+ years of progressive cybersecurity experience in medium-large environments.
• 5+ years leading SOC, Incident Response, Cyber Defense, or Threat Detection teams.
• 5+ years operating and optimizing enterprise security platforms incl SIEM, EDR/XDR, SOAR and security automation such as Microsoft Sentinel, CrowdStrike Falcon, Wirespeed.
• 3+ years building, managing, and maturing security operations capabilities (monitoring, threat hunting, incident response, forensics).

Responsibilities

• Lead the SOC strategy, execution, and continuous improvement with emphasis on threat monitoring, detection, response, and hunting.
• Establish processes, metrics, and reporting to measure effectiveness and support decisions.
• Grow SOC capabilities aligned to business priorities, risk tolerance, and growth goals.
• Ensure readiness and coordination during cybersecurity events and incidents.

Skills

Cybersecurity leadership

SOC leadership

Security automation

Security analytics

Threat detection

Education

Bachelor's degree in Cybersecurity, IT, CS or related field

Tools

SIEM

EDR/XDR

SOAR

Microsoft Sentinel

CrowdStrike Falcon

Wirespeed

Job description

CVS Health is seeking a Lead Director of Security Operations Center to guide cybersecurity operations across the enterprise. You will lead threat monitoring, investigation, response, and hunting while aligning security with business priorities and risk posture.

This role drives standardization, automation, and metrics, partnering with cloud, identity, and engineering teams to strengthen overall security posture and resilience.