Security Operations Lead - AI-Driven SOC, Remote-First

Sword Health, Inc.; United States; On-site; USD 134,000 - 211,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Financial advisory

Equity shares

PTO (Discretionary)

Parental leave

401(k)

Flexible working hours

Remote-first

Paid holidays

Digital therapy for you and family

Job summary

Sword Health, Inc. is seeking a Security Operations Lead to direct Sword’s SecOps squad and shape how threats are detected, investigated, and remediated.

You will own the SIEM architecture, detection engineering, and incident response, leveraging automation and AI to scale a growing, multi-continent footprint. You will mentor detection engineers, drive the security roadmap, and lead high-severity incidents with cross-functional partners.

Qualifications

• Public Trust Clearance required or ability to obtain one.
• Bachelor’s degree in Computer Science, Cybersecurity, or equivalent.
• 7+ years of experience in Security Operations.
• Proven experience scaling a SOC through automation and AI with measurable impact.
• Hands-on SOC structuring and leadership experience.
• Strong incident response and forensics capabilities.
• Cloud experience (AWS and/or GCP) and security controls.
• Strong scripting/development skills for automation.

Responsibilities

• Serve as hands-on technical lead for Sword’s Security Operations Center.
• Own the SIEM end-to-end architecture, data sources, retention, and tuning.
• Lead the SOC/CSIRT team, mentoring engineers and handling major incidents.
• Define the operating model and roadmap for security operations.
• Drive AI- and automation-first transformations of security processes.
• Lead high-severity investigations and post-incident reviews.
• Perform threat hunting and threat intelligence activities.
• Define and report SOC performance metrics.

Skills

Public Trust Clearance

Security operations experience

Leadership

Executive communication

Incident response

Automation using AI/ML

Scripting and development

Education

Bachelor’s degree in Computer Science or Cybersecurity

Tools

Splunk

Microsoft Sentinel

Google Chronicle

Elastic

Python

Job description

Sword Health, Inc. is seeking a Security Operations Lead to direct Sword’s SecOps squad and shape how threats are detected, investigated, and remediated.

You will own the SIEM architecture, detection engineering, and incident response, leveraging automation and AI to scale a growing, multi-continent footprint. You will mentor detection engineers, drive the security roadmap, and lead high-severity incidents with cross-functional partners.