Security Operations Lead: Incident Response & Threat Intel

Socket.dev; Houston (TX); On-site; USD 130,000 - 153,000; Full time

Benefits offered by this job

Comprehensive Health Benefits

Life & Disability Coverage

401(k) Retirement Plan

PTO

Job summary

GetixHealth is seeking an experienced Security Operations Manager to lead the day-to-day Cybersecurity Operations Program, protecting patient and client information within a healthcare revenue cycle environment.

You will oversee monitoring, incident response, vulnerability management, threat intelligence, and security controls while partnering with IT, Compliance, Privacy, Legal, and executive leadership to safeguard ePHI, PII, and financial data.

Qualifications

• Bachelor’s degree or equivalent education and experience in cybersecurity or IT.
• 8+ years of progressive cybersecurity or information security experience.
• 3+ years of experience leading security operations, incident response, security engineering, or a similar function.
• Demonstrated experience managing cybersecurity incidents across multiple technical and business teams.
• Strong working knowledge of SIEM and security monitoring, EDR/XDR, incident response, vulnerability management, identity and access security, network security, email security, AI security, threat intelligence, and security logging and detection.

Responsibilities

• Lead the organization’s Security Operations function, including monitoring, detection, investigation, escalation, containment, and remediation.
• Oversee SIEM, EDR/XDR, email security, vulnerability management, threat intelligence, and related security technologies.
• Develop and maintain security alerts, detection rules, dashboards, use cases, and escalation procedures.
• Lead cybersecurity incident response activities, including investigation, containment, recovery, and post-incident review.
• Maintain and test cybersecurity incident response plans and supporting playbooks.
• Lead the vulnerability management lifecycle across servers, endpoints, applications, cloud environments, and network infrastructure.
• Establish risk-based vulnerability prioritization and remediation standards.
• Monitor emerging cybersecurity threats and coordinate proactive threat-hunting activities.
• Identify risks related to ransomware, phishing, business email compromise, credential theft, insider threats, and healthcare data theft.
• Strengthen identity and access security, including privileged access, MFA, conditional access, and account monitoring.
• Support security monitoring and response across cloud platforms and SaaS environments.
• Support compliance with HIPAA, HITRUST, SOC 2, PCI DSS, client security requirements, and other applicable frameworks.
• Partner with Privacy, Compliance, Legal, and Risk teams on investigations involving sensitive or regulated information.
• Lead, mentor, and develop Security Operations personnel.
• Establish on-call procedures, incident escalation paths, and after-hours response processes.
• Manage security technology vendors, managed security service providers, and incident response partners.
• Develop operational dashboards and reports for Information Security and executive leadership.
• Track key security and risk indicators, including incident response times, vulnerability remediation, endpoint coverage, phishing trends, and security control effectiveness

Skills

Security operations leadership

Incident response

Strategic planning

Communication to stakeholders

Education

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field

Tools

SIEM

EDR/XDR

Email security

Threat intelligence platforms

Compliance management tools

Job description

GetixHealth is seeking an experienced Security Operations Manager to lead the day-to-day Cybersecurity Operations Program, protecting patient and client information within a healthcare revenue cycle environment.

You will oversee monitoring, incident response, vulnerability management, threat intelligence, and security controls while partnering with IT, Compliance, Privacy, Legal, and executive leadership to safeguard ePHI, PII, and financial data.