Security Operations Leader: Detection, IR & Platform Engineering

Envista Holdings Corporation; Brea (CA); On-site; USD 156,000 - 191,000; Full time

Benefits offered by this job

Annual bonus

Medical benefits

401K match

Other compensation plans

Job summary

Envista Holdings Corporation is seeking a strategic and hands-on Security Operations and Engineering Lead to drive enterprise cybersecurity operations, detection engineering, incident response, and security platform capabilities. This role owns the SOC, incident response program, detection lifecycle, and security tooling ecosystem, building scalable, threat-informed security operations.

The ideal candidate will lead cross-functional teams, oversee 24x7 monitoring, and define metrics to measure

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Systems, Business, Engineering, or related fields OR equivalent industry experience.
• 7+ years of experience in cybersecurity, security operations, detection engineering, incident response, or security engineering.
• 5+ years leading security operations, engineering, SOC, or incident response teams.
• Experience operating security capabilities across cloud, SaaS, endpoint, identity, and enterprise environments.
• Experience managing MSSP, MDR, SOC-as-a-Service, or strategic security service providers.

Responsibilities

• Lead enterprise security operations including monitoring, triage, investigation, escalation, and response.
• Oversee SOC and MSSP/MDR partnerships including SLAs, alert quality, escalation paths, and performance metrics.
• Establish 24x7 monitoring aligned to enterprise risk.
• Define KPIs/KRIs including MTTD, MTTR, alert fidelity, detection coverage, and response effectiveness.
• Security Engineering & Platform Management Lead lifecycle management of SIEM, SOAR, EDR/XDR, CSPM, DLP, identity security, and cloud security platforms.
• Drive automation across triage, enrichment, containment, and reporting workflows.
• Define enterprise logging and telemetry strategy including onboarding, parsing, normalization, retention, and coverage standards.
• Coordinate with Legal, Privacy, HR, IT, and Communications.

Skills

Security Operations

SOC Leadership

Incident Response

Detection Engineering

SIEM/EDR/XDR

Cloud Security

MSSP Management

Executive Communication

Education

Bachelor's degree or equivalent

Tools

Microsoft Sentinel

Splunk

QRadar

Chronicle

Job description

Envista Holdings Corporation is seeking a strategic and hands-on Security Operations and Engineering Lead to drive enterprise cybersecurity operations, detection engineering, incident response, and security platform capabilities. This role owns the SOC, incident response program, detection lifecycle, and security tooling ecosystem, building scalable, threat-informed security operations.

The ideal candidate will lead cross-functional teams, oversee 24x7 monitoring, and define metrics to measure