Security Operations & Engineering Lead - Onsite in Brea

envista; Brea (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Envista is seeking a strategic Security Operations and Engineering Lead to drive enterprise cybersecurity operations, detection engineering, incident response, and security platform capabilities. This on‑site role requires four days in the Brea office to support collaboration and business needs.

You will own the SOC, incident response program, detection lifecycle, and security tooling ecosystem, building scalable, threat‑informed, measurable security operations for the organization.

Qualifications

• Bachelor's degree or equivalent experience in a related field and leadership experience.
• 7+ years in cybersecurity, security operations, detection engineering, incident response, or security engineering.
• 5+ years leading security operations, SOC, or incident response teams.
• Experience across cloud, SaaS, endpoint, identity, and enterprise environments.

Responsibilities

• Lead enterprise security operations including monitoring, triage, investigation, escalation, and response.
• Oversee SOC and MSSP/MDR partnerships with SLAs, alert quality, escalation paths, and metrics.
• Define KPIs/KRIs including MTTD, MTTR, alert fidelity, and detection coverage.
• Own incident response program including playbooks, exercises, breach workflows, and communications.
• Drive automation across triage, enrichment, containment, and reporting workflows.

Skills

Security operations

Incident response

Detection engineering

Leadership

Cloud security

Education

Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Systems, Business, Engineering, or related fields

Tools

Microsoft Sentinel

Splunk

QRadar

Chronicle

Job description

Envista is seeking a strategic Security Operations and Engineering Lead to drive enterprise cybersecurity operations, detection engineering, incident response, and security platform capabilities. This on‑site role requires four days in the Brea office to support collaboration and business needs.

You will own the SOC, incident response program, detection lifecycle, and security tooling ecosystem, building scalable, threat‑informed, measurable security operations for the organization.