Security Operations Lead - AI-Driven SOC, Remote-First

Neura Market; Northern (KY); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid holidays

Remote-first company

Dental and vision insurance

Job summary

Sword Health is seeking a Security Operations Lead to direct Sword’s Security Operations Center, architecture, and detection engineering. You’ll drive incident response and automation to scale across a multi-continent footprint for 700,000+ members.

Role emphasizes leadership, MITRE ATT&CK-aligned detections, and cross-functional collaboration with engineering, IT, and legal. A hands-on technical leader with strong cloud and scripting skills is essential.

Qualifications

• Public Trust Clearance (ability to obtain)
• 7+ years in Security Operations
• Experience scaling SOC via automation/AI
• Experience leading SOC/CSIRT teams
• Strong cloud experience (AWS/GCP)
• Strong scripting/development for automation

Responsibilities

• Serve as hands-on technical lead for Sword’s SOC
• Own the SIEM end-to-end and detection content
• Lead the SOC/CSIRT team and incidents
• Define operating model and roadmap for SOC
• Drive AI- and automation-first security initiatives
• Lead high-severity incident response from detection to post-mortem
• Manage threat intel and threat hunting programs
• Define and report SOC performance metrics
• Influence security architecture across products and platforms

Skills

SIEM architecture

Detection engineering

Incident response

Cloud security

Python/Go scripting

Leadership & mentoring

Education

Bachelor’s degree in Computer Science or Cybersecurity

Tools

Splunk

Microsoft Sentinel

Google Chronicle

Elastic Stack

Job description

Sword Health is seeking a Security Operations Lead to direct Sword’s Security Operations Center, architecture, and detection engineering. You’ll drive incident response and automation to scale across a multi-continent footprint for 700,000+ members.

Role emphasizes leadership, MITRE ATT&CK-aligned detections, and cross-functional collaboration with engineering, IT, and legal. A hands-on technical leader with strong cloud and scripting skills is essential.