Remote Director of Enterprise Security & Detection

Virta Health; United States; Remote; USD 162,000 - 209,000; Full time

Job summary

Virta Health is seeking a Director of Enterprise Security to build and lead our security operations at scale. This player‑coach role blends hands‑on investigations, detections, and tooling with setting the standards, structure, and roadmap the function will grow into.

You will own SOC design, detection engineering, incident response, and security platform strategy across SIEM, CSPM, CNAPP, and SOAR, protecting patient data while enabling fast, secure product development.

Qualifications

• 10+ years in security operations, detection and response, or cloud security.
• 3+ years leading or mentoring technical security teams.
• Hands-on incident response across logs, endpoints, identity, cloud, SaaS.
• Experience writing detection rules in a detection-as-code model.
• Strong scripting or programming (Python, Go).
• Experience owning and tuning security platforms (SIEM, EDR/XDR, CSPM, SOAR).
• Cloud security experience in GCP with containerized workloads.
• Experience applying AI to security or operations.
• Clear communicator to executives, engineers, and vendors.

Responsibilities

• Direct, mentor, and grow a security operations team.
• Define SOC operating model and staffing roadmap.
• Own detection engineering and observability.
• Lead technical incident response from triage to post-incident review.
• Perform hands-on investigations across logs, identity, cloud, SaaS.
• Develop automated response capabilities and SOAR workflows.
• Lead security platform strategy across CASB, CNAPP, CSPM.
• Coordinate with GRC on automating evidence collection and controls.
• Design AI-assisted capabilities for security operations.

Skills

Security operations

Incident response

Detection rules

MITRE ATT&CK

Scripting

Python

Go

SOAR

SIEM

Cloud security

GCP

AI in security

Tools

SIEM

EDR/XDR

CSPM

SOAR

Job description

Virta Health is seeking a Director of Enterprise Security to build and lead our security operations at scale. This player‑coach role blends hands‑on investigations, detections, and tooling with setting the standards, structure, and roadmap the function will grow into.

You will own SOC design, detection engineering, incident response, and security platform strategy across SIEM, CSPM, CNAPP, and SOAR, protecting patient data while enabling fast, secure product development.