Principal, SOC & Threat Intelligence Lead

Blue Shield of California; California (MO); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Blue Shield of California seeks an experienced Corporate Security Operations Center, Principal to elevate security operations and threat intelligence programs. You will lead SOC strategy, ensure regulatory alignment, and guide incident response across hybrid environments.

In this role you will drive KPI development, partner with HR, Legal, Cybersecurity, and Compliance, and mentor teams while advancing critical security initiatives. A strong background in security operations is essential.

Qualifications

• Requires a Bachelor's degree in Criminal Justice, Cybersecurity, Intelligence Studies, Security and Risk Analysis or related field (or equivalent experience).
• Requires 10 years of working in corporate security, intelligence, or security operations.
• Proven experience managing or supporting a Security Operations Center (SOC).
• Strong analytical skills and experience with threat intelligence platforms and methodologies.
• Flexibility to work non-traditional schedules, including holidays, nights, and some weekends, to adapt to the company’s operations.
• Familiarity with physical security systems (e.g., CCURE, VMS, intrusion detection).
• Familiarity with intelligence aggregator and mass communications software (e.g., Dataminr, Everbridge, AlertMedia, Horizon, Miir3).
• Excellent communication and interpersonal skills; ability to influence across departments.
• Ability to manage multiple projects simultaneously, work autonomously, and navigate ambiguity effectively.
• Certifications such as CPP, PSP, CISSP, or GCTI are a plus

Responsibilities

• Serve as a subject matter expert in operations, policy and process development of a Security Operations Center (SOC) ensuring alignment with industry standards, regulatory requirements, and organizational goals.
• Integrate threat intelligence into SOC workflows to enhance monitoring, detection, and incident response. Develop and refine detection strategies, incident response protocols, and KPIs to drive continuous improvement.
• Collaborate with HR, Legal, Cybersecurity, and Compliance teams to investigate and resolve incidents involving workplace violence, insider threats, external threats, and cyber-physical risks.
• Partner with Business Continuity Team to develop and maintain emergency preparedness programs and communicate during critical events.
• Oversee physical security systems in partnership with technology teams, including access control, surveillance, and alarm systems.
• Manage vendor relationships for SOC workforce; track expenses, budget alignment, vendor performance, and contract negotiations.
• Lead or contribute to large cross-functional projects and liaise with external agencies to enhance threat intelligence and response capabilities.
• Develop and implement operational strategies using data, KPIs and benchmarks to guide decisions.
• Provide guidance, coaching, and training to foster security awareness and learning.
• Communicate with executive leadership and external stakeholders; prepare briefings and recommendations.
• Lead complex project initiatives with cross-functional teams; may direct work of others.
• Apply agile methodologies to solve complex problems; conduct root cause analysis and develop solutions.
• May be assigned direct reports.

Skills

Security operations

Threat intelligence

Stakeholder communication

Project management

Analytical thinking

Ambiguity navigation

Education

Bachelor's degree in Criminal Justice or related field

Tools

CCURE

VMS

Dataminr

Everbridge

AlertMedia

Horizon

Miir3

Job description

Blue Shield of California seeks an experienced Corporate Security Operations Center, Principal to elevate security operations and threat intelligence programs. You will lead SOC strategy, ensure regulatory alignment, and guide incident response across hybrid environments.

In this role you will drive KPI development, partner with HR, Legal, Cybersecurity, and Compliance, and mentor teams while advancing critical security initiatives. A strong background in security operations is essential.