Lead SOC Director: Cyber Defense & Incident Response

CVS Health; Charleston (WV); On-site; USD 144,000 - 288,000; Full time

Benefits offered by this job

Benefits package

Bonus program

Job summary

CVS Health seeks a Lead Director - Security Operations Center (SOC) to lead cybersecurity operations for a healthcare business. The role ensures detection, investigation, response, and recovery from threats, with emphasis on actionable intelligence and robust processes.

You will drive security strategy, governance, and resilience across cloud, identity, and platform security while leading a high-performing team and collaborating with cross-functional partners to safeguard critical operations and

Qualifications

• 10+ years of progressive cybersecurity experience within medium-large scale environments.
• 5+ years leading Security Operations Center (SOC), Incident Response, Cyber Defense, or Threat Detection teams.
• 5+ years of experience operating and optimizing enterprise security platforms, including SIEM, EDR/XDR, SOAR, and security automation technologies.
• 3+ years of demonstrated experience building, managing, and maturing security operations capabilities, including security monitoring, threat hunting, incident response, digital forensics, and security investigations.

Responsibilities

• Lead the strategy, execution, and continuous improvement of the Security Operations Center, including threat monitoring, detection, investigation, response, and threat hunting activities.
• Establish operational processes, service levels, metrics, and reporting to measure effectiveness and support informed decision-making.
• Build and mature SOC capabilities that align security operations to business priorities, risk tolerance, and growth objectives.
• Ensure operational readiness, escalation procedures, and effective coordination during cybersecurity events and incidents.

Skills

Cybersecurity experience

SOC leadership

Threat detection

Incident response

Security automation

Cloud security

Education

Bachelor's degree in Cybersecurity

Tools

SIEM

EDR/XDR

SOAR

Microsoft Sentinel

CrowdStrike Falcon

Wirespeed

Job description

CVS Health seeks a Lead Director - Security Operations Center (SOC) to lead cybersecurity operations for a healthcare business. The role ensures detection, investigation, response, and recovery from threats, with emphasis on actionable intelligence and robust processes.

You will drive security strategy, governance, and resilience across cloud, identity, and platform security while leading a high-performing team and collaborating with cross-functional partners to safeguard critical operations and