Security Operations Manager

ARStrat LLC; Houston, Northern (TX, KY); Hybrid; USD 130,000 - 153,000; Full time

Benefits offered by this job

Comprehensive Health Benefits

Life & Disability Coverage

401(k) Retirement Plan

Paid Time Off

Flexible Benefit Options

Job summary

GetixHealth is seeking an experienced Security Operations Manager to lead the day-to-day cybersecurity operations program in a remote capacity. You will oversee security monitoring, incident detection and response, vulnerability management, threat intelligence, and endpoint operations while protecting ePHI, PII, and client data in a healthcare revenue cycle environment.

The role requires 8+ years in cybersecurity, 3+ years leading security operations, and strong knowledge of SIEM/EDR,

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or equivalent education and relevant experience.
• 8+ years of progressive cybersecurity or information security experience.
• 3+ years of experience leading security operations, incident response, security engineering, or a comparable cybersecurity function.
• Demonstrated experience managing cybersecurity incidents across multiple technical and business teams.
• Strong working knowledge of SIEM and security monitoring, EDR/XDR technologies, incident response, vulnerability management, identity and access security, network security, email security, AI security, threat intelligence, security logging and detection.
• Knowledge of common attack techniques and frameworks such as MITRE ATT&CK.

Responsibilities

• Lead the organization’s Security Operations function, including monitoring, detection, investigation, escalation, containment, and remediation.
• Oversee SIEM, EDR/XDR, email security, vulnerability management, threat intelligence, and related security technologies.
• Develop and maintain security alerts, detection rules, dashboards, use cases, and escalation procedures.
• Lead cybersecurity incident response activities, including investigation, containment, recovery, and post-incident review.
• Maintain and test cybersecurity incident response plans and supporting playbooks.
• Lead the vulnerability management lifecycle across servers, endpoints, applications, cloud environments, and network infrastructure.
• Establish risk-based vulnerability prioritization and remediation standards.
• Monitor emerging cybersecurity threats and coordinate proactive threat-hunting activities.
• Identify risks related to ransomware, phishing, business email compromise, credential theft, insider threats, and healthcare data theft.
• Strengthen identity and access security, including privileged access, MFA, conditional access, and account monitoring.
• Support security monitoring and response across cloud platforms and SaaS environments.
• Support compliance with HIPAA, HITRUST, SOC 2, PCI DSS, client security requirements, and other applicable frameworks.
• Partner with Privacy, Compliance, Legal, and Risk teams on investigations involving sensitive or regulated information.
• Lead, mentor, and develop Security Operations personnel.
• Establish on-call procedures, incident escalation paths, and after-hours response processes.
• Manage security technology vendors, managed security service providers, and incident response partners.
• Develop operational dashboards and reports for Information Security and executive leadership.
• Track key security and risk indicators, including incident response times, vulnerability remediation, endpoint coverage, phishing trends, and security control effectiveness

Skills

SIEM and security monitoring

EDR/XDR technologies

Incident response

Vulnerability management

Identity and access security

Network security

Email security

Threat intelligence

Security logging and detection

MITRE ATT&CK

Education

Bachelor’s degree in Cybersecurity / IT / CS / IS or related field

Equivalent education and relevant experience

Job description

GetixHealth is seeking an experienced Security Operations Manager to lead the day-to-day Cybersecurity Operations Program and protect the confidentiality, integrity, and availability of company and client information within a healthcare revenue cycle management environment.

This role will oversee security monitoring, incident detection and response, vulnerability management, threat intelligence, endpoint operations, and the continuous improvement of security controls. The Security Operations Manager will also play a critical role in protecting ePHI, PII, financial information, client data, and other sensitive information while partnering with IT, Infrastructure, GRC, Compliance, Privacy, Legal, and executive leadership.

Location: Remote

Department: Information Technology

Compensation: $130,000–$153,000 annually

Position Type: Full-Time

Travel: Up to 10%, as needed

Key Responsibilities:

• Lead the organization’s Security Operations function, including monitoring, detection, investigation, escalation, containment, and remediation
• Oversee SIEM, EDR/XDR, email security, vulnerability management, threat intelligence, and related security technologies
• Develop and maintain security alerts, detection rules, dashboards, use cases, and escalation procedures
• Lead cybersecurity incident response activities, including investigation, containment, recovery, and post-incident review
• Maintain and test cybersecurity incident response plans and supporting playbooks
• Lead the vulnerability management lifecycle across servers, endpoints, applications, cloud environments, and network infrastructure
• Establish risk-based vulnerability prioritization and remediation standards
• Monitor emerging cybersecurity threats and coordinate proactive threat-hunting activities
• Identify risks related to ransomware, phishing, business email compromise, credential theft, insider threats, and healthcare data theft
• Strengthen identity and access security, including privileged access, MFA, conditional access, and account monitoring
• Support security monitoring and response across cloud platforms and SaaS environments
• Support compliance with HIPAA, HITRUST, SOC 2, PCI DSS, client security requirements, and other applicable frameworks
• Partner with Privacy, Compliance, Legal, and Risk teams on investigations involving sensitive or regulated information
• Lead, mentor, and develop Security Operations personnel
• Establish on-call procedures, incident escalation paths, and after-hours response processes
• Manage security technology vendors, managed security service providers, and incident response partners
• Develop operational dashboards and reports for Information Security and executive leadership
• Track key security and risk indicators, including incident response times, vulnerability remediation, endpoint coverage, phishing trends, and security control effectiveness

Qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or equivalent education and relevant experience
• 8+ years of progressive cybersecurity or information security experience
• 3+ years of experience leading security operations, incident response, security engineering, or a comparable cybersecurity function
• Demonstrated experience managing cybersecurity incidents across multiple technical and business teams
• Strong working knowledge of:
  • SIEM and security monitoring
  • EDR/XDR technologies
  • Incident response
  • Vulnerability management
  • Identity and access security
  • Network security
  • Email security
  • AI security
  • Threat intelligence
  • Security logging and detection
• Experience operating security programs in environments handling sensitive or regulated information
• Knowledge of common attack techniques and frameworks such as MITRE ATT&CK
• Strong analytical, investigative, organizational, and problem-solving skills
• Ability to communicate complex cybersecurity issues clearly to both technical and non-technical stakeholders
• Strong organizational and strategic planning skills
• Ability to meet deadlines, manage multiple priorities, and solve complex issues

What We’re Looking For:

• A highly curious and investigative mindset
• A passion for cybersecurity and staying current with emerging threats and technologies
• Strong leadership and team development skills
• Ability to balance technical depth with strategic thinking
• Comfortable working in a fast-paced, performance-driven environment
• Ability to collaborate across IT, Compliance, Legal, Privacy, Risk, and executive leadership

Benefits & Incentives:

• Comprehensive Health Benefits: Medical, dental, and vision plan options
• Life & Disability Coverage: Company-paid Basic Life and AD&D, short-term disability, and long-term disability coverage
• 401(k) Retirement Plan: Retirement savings plan with company match
• Paid Time Off: PTO accrual beginning on your first day of employment
• Flexible Benefit Options: Benefit choices designed to support individual and family needs

About GetixHealth:

Founded in 1992, GetixHealth is a leading provider of healthcare revenue cycle management services. We partner with healthcare organizations to improve financial performance, operational efficiency, compliance, and the patient financial experience.

Additional Notes:

This role profile is not intended to be an exhaustive list of qualifications, skills, duties, responsibilities, or working conditions associated with the position.

GetixHealth is an equal employment opportunity employer and participates in E-Verify.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.