Remote Security Operations Lead - HIPAA/Threat Response

ARStrat LLC; Houston, Northern (TX, KY); Hybrid; USD 130,000 - 153,000; Full time

Benefits offered by this job

Comprehensive Health Benefits

Life & Disability Coverage

401(k) Retirement Plan

Paid Time Off

Flexible Benefit Options

Job summary

GetixHealth is seeking an experienced Security Operations Manager to lead the day-to-day cybersecurity operations program in a remote capacity. You will oversee security monitoring, incident detection and response, vulnerability management, threat intelligence, and endpoint operations while protecting ePHI, PII, and client data in a healthcare revenue cycle environment.

The role requires 8+ years in cybersecurity, 3+ years leading security operations, and strong knowledge of SIEM/EDR,

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or equivalent education and relevant experience.
• 8+ years of progressive cybersecurity or information security experience.
• 3+ years of experience leading security operations, incident response, security engineering, or a comparable cybersecurity function.
• Demonstrated experience managing cybersecurity incidents across multiple technical and business teams.
• Strong working knowledge of SIEM and security monitoring, EDR/XDR technologies, incident response, vulnerability management, identity and access security, network security, email security, AI security, threat intelligence, security logging and detection.
• Knowledge of common attack techniques and frameworks such as MITRE ATT&CK.

Responsibilities

• Lead the organization’s Security Operations function, including monitoring, detection, investigation, escalation, containment, and remediation.
• Oversee SIEM, EDR/XDR, email security, vulnerability management, threat intelligence, and related security technologies.
• Develop and maintain security alerts, detection rules, dashboards, use cases, and escalation procedures.
• Lead cybersecurity incident response activities, including investigation, containment, recovery, and post-incident review.
• Maintain and test cybersecurity incident response plans and supporting playbooks.
• Lead the vulnerability management lifecycle across servers, endpoints, applications, cloud environments, and network infrastructure.
• Establish risk-based vulnerability prioritization and remediation standards.
• Monitor emerging cybersecurity threats and coordinate proactive threat-hunting activities.
• Identify risks related to ransomware, phishing, business email compromise, credential theft, insider threats, and healthcare data theft.
• Strengthen identity and access security, including privileged access, MFA, conditional access, and account monitoring.
• Support security monitoring and response across cloud platforms and SaaS environments.
• Support compliance with HIPAA, HITRUST, SOC 2, PCI DSS, client security requirements, and other applicable frameworks.
• Partner with Privacy, Compliance, Legal, and Risk teams on investigations involving sensitive or regulated information.
• Lead, mentor, and develop Security Operations personnel.
• Establish on-call procedures, incident escalation paths, and after-hours response processes.
• Manage security technology vendors, managed security service providers, and incident response partners.
• Develop operational dashboards and reports for Information Security and executive leadership.
• Track key security and risk indicators, including incident response times, vulnerability remediation, endpoint coverage, phishing trends, and security control effectiveness

Skills

SIEM and security monitoring

EDR/XDR technologies

Incident response

Vulnerability management

Identity and access security

Network security

Email security

Threat intelligence

Security logging and detection

MITRE ATT&CK

Education

Bachelor’s degree in Cybersecurity / IT / CS / IS or related field

Equivalent education and relevant experience

Job description

GetixHealth is seeking an experienced Security Operations Manager to lead the day-to-day cybersecurity operations program in a remote capacity. You will oversee security monitoring, incident detection and response, vulnerability management, threat intelligence, and endpoint operations while protecting ePHI, PII, and client data in a healthcare revenue cycle environment.

The role requires 8+ years in cybersecurity, 3+ years leading security operations, and strong knowledge of SIEM/EDR,