Lead Director, SOC — Equity-Eligible Security Operations Leader

CVS Health; Harrisburg (Dauphin County); On-site; USD 144,000 - 288,000; Full time

Benefits offered by this job

Comprehensive benefits

Career development

Job summary

CVS Health is seeking a Lead Director for Security Operations Center (SOC) to lead the cybersecurity operations for a rapidly evolving healthcare business. You will guide threat monitoring, investigation, response, and recovery efforts to protect critical systems, data, and customer trust.

Ideal candidates bring 10+ years in cybersecurity, 5+ years leading SOC teams, and hands-on experience with SIEM, EDR/XDR, SOAR, and automation.

Qualifications

• 10+ years of progressive cybersecurity experience in large environments.
• 5+ years leading SOC, IR, or threat detection teams.
• 5+ years operating enterprise security platforms (SIEM, EDR/XDR, SOAR) and tools like Microsoft Sentinel and CrowdStrike.
• 3+ years building and maturing security operations capabilities.

Responsibilities

• Lead the SOC strategy, execution, and continuous improvement of security operations.
• Establish processes, service levels, metrics, and reporting to measure effectiveness.
• Drive threat detection, incident response, and threat hunting activities to reduce risk.
• Collaborate with stakeholders across technology and business functions to strengthen security posture.

Skills

Cybersecurity leadership

SOC management

Threat detection

Incident response

Security automation

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field

Tools

Microsoft Sentinel

CrowdStrike Falcon

Wirespeed

SOAR platforms

Job description

CVS Health is seeking a Lead Director for Security Operations Center (SOC) to lead the cybersecurity operations for a rapidly evolving healthcare business. You will guide threat monitoring, investigation, response, and recovery efforts to protect critical systems, data, and customer trust.

Ideal candidates bring 10+ years in cybersecurity, 5+ years leading SOC teams, and hands-on experience with SIEM, EDR/XDR, SOAR, and automation.