Head of Security Operations Center & Cyber Defense

CVS Health; Saint Paul (MN); On-site; USD 144,000 - 288,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Lead Director - Security Operations Center (SOC) to lead the cybersecurity operations function for a rapidly evolving healthcare business. You will ensure detection, investigation, response, and recovery from cyber threats while protecting critical operations and customer trust.

You will build and mature SOC capabilities, establish metrics, and coordinate incidents. You will leverage automation and AI-enabled capabilities and partner with cloud, identity, and engineering

Qualifications

• 10+ years of progressive cybersecurity experience within medium-large scale environments.
• 5+ years leading Security Operations Center (SOC), Incident Response, Cyber Defense, or Threat Detection teams.
• 5+ years operating and optimizing enterprise security platforms including SIEM, EDR/XDR, SOAR, and security automation technologies such as Microsoft Sentinel, CrowdStrike Falcon, and Wirespeed.
• 3+ years of demonstrated experience building, managing, and maturing security operations capabilities including monitoring, threat hunting, incident response, forensics, and investigations.

Responsibilities

• Lead the strategy, execution, and continuous improvement of the Security Operations Center (SOC).
• Establish processes, metrics, and reporting to measure effectiveness and support informed decisions.
• Build mature SOC capabilities aligned to business priorities and risk tolerance.
• Coordinate incident response and escalation during cybersecurity events and incidents.
• Drive improvements in detection engineering and response workflows to reduce risk and improve times.

Skills

Leadership

Strategic thinking

Communication

Mentoring

Education

Bachelor's degree in Cybersecurity/IT/CS/Engineering

Tools

SIEM

EDR/XDR

SOAR

Microsoft Sentinel

CrowdStrike Falcon

Wirespeed

Job description

CVS Health is seeking a Lead Director - Security Operations Center (SOC) to lead the cybersecurity operations function for a rapidly evolving healthcare business. You will ensure detection, investigation, response, and recovery from cyber threats while protecting critical operations and customer trust.

You will build and mature SOC capabilities, establish metrics, and coordinate incidents. You will leverage automation and AI-enabled capabilities and partner with cloud, identity, and engineering