Manager, Security Operations

Strata Decision Technology; Chicago (IL); On-site; USD 112,000 - 140,000; Full time

Benefits offered by this job

Comprehensive benefits

Retirement benefits

Paid time off

Job summary

Strata seeks an experienced Security Operations Manager to lead our security operations, including threat detection, incident response, and vulnerability management.

You will guide a team of Security Engineers, build scalable processes, and align practices with HITRUST CSF, ISO 27001, SOC 2 and SOX.

Qualifications

• 5+ years in security operations, blue teaming, or incident response.
• 2+ years in leadership or supervisory roles.
• Hands-on with SIEM, EDR/XDR, SOAR, threat intel.
• Experience with HITRUST, ISO 27001, SOC 2, and SOX compliance.
• Familiarity with MITRE ATT&CK, NIST 800-53/800-61, and CIS Controls.
• Certifications such as GCIH, GCFA, CISSP, or CISM.

Responsibilities

• Lead day-to-day security operations including monitoring, threat detection, triage, investigation, and incident response.
• Develop and maintain SOPs and incident response playbooks for healthcare threats and compliance obligations.
• Automate tasks through SOAR, scripting, and AI-enhanced processes.
• Mentor and grow the security operations team; foster learning culture.
• Collaborate with IT, DevOps, Infrastructure, and R&D to secure critical infrastructure and workflows.
• Support audits, evidence collection, and control mapping for HITRUST/ISO/SOC/SOX.
• Provide regular security metrics and risk insights to leadership and stakeholders.

Skills

Threat detection

Incident response

Automation tooling

Team leadership

Stakeholder comms

Risk management

Regulatory compliance

Tools

CrowdStrike

Rapid7

SOAR

SIEM

EDR/XDR

Python

PowerShell

Bash

Job description

We are seeking an experienced Security Operations Manager to lead and strengthen our security operations function at Strata. In this role, you will oversee day-to-day security operations, including threat detection, incident response, security monitoring, and vulnerability management, while driving improvements in operational efficiency, automation, and risk management. As a hands‑on technical leader, you will develop and empower a team of Security Engineers, establish scalable processes, and ensure our security practices align with regulatory and compliance requirements. Partnering closely with IT, Infrastructure, DevOps, and Engineering teams, you will play a critical role in protecting our systems, supporting our customers, and continuously improving Strata's security posture.

• Technical Operations & Incident response
• Lead day-to-day security operations including monitoring, threat detection, triage, investigation, and incident response.
• Operate and tune security platforms such as SIEM, EDR, vulnerability management, and threat intelligence tools.
• Leverage AI and automation tooling to streamline workflows, improve detection fidelity, and reduce manual effort.
• Act as an escalation point for complex incidents, root cause investigations, and cross-team coordination.
• Playbook & Process Development
• Develop and maintain Standard Operating Procedures (SOPs) and incident response playbooks tailored to healthcare-specific threat vectors and compliance obligations.
• Automate repeatable tasks through SOAR platforms, scripting, and AI-enhanced processes.
• Iterate processes and procedures already in place to be more efficient and repeatable.
• Ensure alignment of operational practices with HITRUST CSF, ISO 27001, SOC 2 Type II, and SOX ITGC controls.
• Manage and mentor a security operations team to facilitate building deeper expertise in cybersecurity.
• Create a learning-focused culture that encourages knowledge sharing, experimentation, and continuous improvement.
• Foster risk-aware decision-making, enabling the team to act confidently with limited oversight using standardized risk frameworks.
• Governance & Risk Alignment
• Support security-related audits, evidence collection, and control mapping.
• Embed security operations processes into broader risk management and governance activities, contributing to HITRUST certification, ISO audits, and SOC/SOX readiness.
• Cross-Functional Engagement
• Collaborate with IT, DevOps, Infrastructure, and R&D Engineering teams to secure critical infrastructure, applications, and workflows.
• Advocate for security as a business-enabler by balancing regulatory needs, business objectives, and technical feasibility.
• Provide regular operational metrics and risk insights to leadership and stakeholders.

What we’re looking for:

• 5+ years of experience in security operations, blue teaming, or incident response roles.
• 2+ years in leadership or supervisory capacity.
• Hands-on expertise with
• Security platforms: SIEM, EDR/XDR, threat intel, SOAR, CrowdStrike, Rapid7
• Scripting/automation: Python, PowerShell, Bash
• Log analysis, detection engineering, threat hunting
• Experience integrating operations with compliance standards such as HITRUST, ISO 27001, SOC 2, and SOX.
• Strong understanding of MITRE ATT&CK, NIST 800-53/800-61, and CIS Controls.
• Experience in regulated industries, especially healthcare and PHI environments.
• Demonstrated success in creating SOPs, playbooks, and team workflows.
• Certifications such as GCIH, GCFA, CISSP, CISM
• Pragmatic and outcome-oriented; able to align security with business impact.
• Proven mentor and leader with a passion for developing others.
• Strong communicator with both technical teams and executive stakeholders.
• Curious, analytical, and proactive in exploring AI and automation to elevate security outcomes.

Estimated Salary Range:$112,000 - $140,000

Actual salary will be determined based on factors including, but not limited to, skill set and level of experience. This salary range is a good faith estimate of base pay. Strata also provides discretionary variable pay programs based on role. In addition, Strata provides a comprehensive benefits package including retirement benefits, health and welfare benefits, paid time off, parental leave, life and accident insurance, and other voluntary and well-being benefits.

Find out more about Strata benefits here .

How we work:

Our preferred location for open roles is Chicago, IL. We value in‑person connection and regularly host on‑campus events to create meaningful opportunities for our team to build relationships and collaborate

Here @ Strata…

Our culture is driven by our people solving problems together. We embrace learning, collaboration, and continuous career growth. Together, we lift our customers, our products, our company, and our community.

We believe that each of our team member’s unique perspectives and experiences is what drives innovation and positive change. Our individual differences are what make us a more forward-thinking organization. We foster a culture of inclusion, equity and belonging, regardless of race, religion, disability, sex, sexual orientation, gender identity or national origin.

Our Core Values:

While we celebrate what makes each member of our team unique, our core values are what connect us. They set clear expectations for how we approach our work and how each of us can positively influence the experience of our team and our customers.

• We connect with positive intent.
• We are helpful.
• We own it.
• We are humble.