Security Operations Manager

PANTHERx Rare Pharmacy; Pittsburgh (Allegheny County); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Hybrid work options

Medical, dental, vision coverage

401K with employer matching

Employer-paid life insurance

Short/long term disability coverage

Generous paid time off & holidays

Job summary

PANTHERx Rare Pharmacy, based in Pittsburgh, seeks a Security Operations Manager to lead day-to-day security operations, drive incident response, and advance threat detection capabilities in a hybrid work setting.

You will oversee a team of security analysts, manage MDR/SIEM providers, and collaborate with Legal, Compliance, and Privacy to reduce cyber risk and protect patient data. This role requires leadership and deep security expertise.

Qualifications

• Bachelor's degree or equivalent in information security or related field.
• 7+ years in cybersecurity with security operations and incident response.
• Experience leading responses to significant security incidents.
• Experience with enterprise SIEM, EDR, and MDR platforms.
• Strong knowledge of MITRE ATT&CK framework and log analysis.

Responsibilities

• Lead, mentor, and develop security operations staff and build a culture of accountability.
• Establish and manage security operations processes, including alert triage, runbooks, and SLAs.
• Manage MDR, SIEM, incident response providers and vendor relations.
• Define, track, and report operational metrics (MTTD, MTTR, alert volume, coverage).
• Oversee security monitoring and alert triage across SIEM, EDR, identity, email, network, and cloud.
• Direct detection engineering and tuning efforts aligned to MITRE ATT&CK and reduce false positives.
• Lead cyber incident response from identification to containment and recovery as incident commander.
• Coordinate with Legal, Privacy, Compliance, leadership, forensic partners, and law enforcement as needed.
• Develop, maintain, and test the incident response plan and playbooks.
• Operationalize threat intelligence into detections and hunts, and oversee threat hunting.
• Own the health of security platforms (SIEM, EDR, email security, identity protection, data protection).
• Ensure log onboarding, coverage, and retention meet needs; collaborate with Security Engineering.
• Maintain security operations policies, standards, and remediation tracking; report to leadership.

Skills

Security operations

Incident response

Threat detection

Team leadership

MDR / SIEM management

Education

Bachelor’s degree in Information Security or related field

Tools

SIEM

EDR

MDR platforms

Microsoft security tools

Job description

7,000 Diseases - 500 Treatments - 1 Rare Pharmacy

PANTHERx is the nation's largest rare disease pharmacy, and we put the patient experience at the top of everything that we do.

If you are looking for a career in the healthcare field that embraces authentic dedication to patient care, you don’t need to look beyond PANTHERx. In every line of service, in every position and area of expertise, PANTHERx associates are driven to provide the highest quality outcomes for our patients.

We Are Seeking Team Members Who

Are inspired and compassionate problem solvers;

Produce high quality work;

Thrive in the excitement of the ever-challenging environment of modern medicine; and

Are committed to achieving superior health outcomes for people living with rare and devastating diseases.

At PANTHERx, we know our employees are the driving force in what we do. We cultivate talent and encourage growth within PANTHERx so that our associates can continue to explore their interests and expand their careers. Guided by our mission to provide uncompromising quality every day, we continue our strategic growth to further reach those affected by rare diseases.

Join the PANTHERx team, and define your own RxARE future in healthcare!

Security Operations Manager

Location: Pittsburgh, PA (Hybrid)

Classification: Exempt

Status: Full-Time

Reports to: Director, Information Security

Purpose

The Security Operations Manager is responsible for leading the day-to-day operation of the organization’s security operations function, including security monitoring, detection and response, and incident management. This role manages a team of security analysts, oversees managed detection and response (MDR) and incident response partners, and ensures the organization can rapidly detect, contain, and recover from cyber threats. The Security Operations Manager partners closely with Infrastructure, Compliance, Legal, and business stakeholders to reduce cyber risk, protect sensitive data, and support compliance with applicable regulatory and organizational requirements. This role serves as the operational escalation point for security events and drives continuous improvement of security operations capabilities and maturity.

Responsibilities

Security Operations Leadership

• Lead, mentor, and develop security operations staff, including setting priorities, assigning work, conducting performance reviews, and building a culture of accountability and continuous learning.
• Establish and manage security operations processes, including alert triage and escalation procedures, on-call coverage, runbooks, playbooks, and service-level objectives.
• Manage relationships and performance of MDR, SIEM, incident response retainer, and other third-party security service providers.
• Define, track, and report operational metrics and key performance indicators, such as mean time to detect, mean time to respond, alert volume, and detection coverage, to security leadership.

Monitoring, Detection & Incident Response

• Oversee security monitoring and alert triage across SIEM, endpoint, identity, email, network, and cloud platforms to ensure timely and accurate detection of threats.
• Direct detection engineering and tuning efforts, including developing use cases aligned to the MITRE ATT&CK framework and reducing false positives.
• Lead cyber incident response from identification through containment, eradication, recovery, and post-incident review, serving as incident commander for significant events.
• Coordinate with Legal, Privacy, Compliance, executive leadership, external forensic partners, and law enforcement during security incidents, including support for regulatory and breach notification requirements.
• Develop, maintain, and test the incident response plan and playbooks through tabletop exercises and lessons-learned reviews.

Threat Intelligence

• Operationalize threat intelligence from industry sources, ISACs, vendor advisories, and dark web monitoring into detections, hunts, and defensive actions.
• Oversee proactive threat hunting activities to identify adversary behavior that evades existing controls.

Security Platform Operations

• Own the operational health and effectiveness of security platforms, including SIEM, endpoint detection and response, email security, identity protection, and data protection technologies.
• Ensure log source onboarding, logging coverage, and data retention meet detection, investigation, and compliance needs.
• Partner with Security Engineering to evaluate, deploy, and tune security tools and to inform the security technology roadmap.

Governance & Continuous Improvement

• Maintain security operations policies, standards, and procedures, and track remediation of audit findings and corrective action plan items.
• Report on security posture, incident trends, and risk to senior leadership, and contribute to strategic cybersecurity initiatives, staffing plans, and roadmap development.

Required Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field, or equivalent experience.
• 7+ years of experience in cybersecurity, including security operations, incident response, or threat detection, with at least 2 years in a team lead or management role.
• Demonstrated experience leading the response to significant security incidents from detection through recovery.
• Experience with enterprise SIEM, endpoint detection and response, and MDR platforms, and with Microsoft security technologies.
• Strong knowledge of attacker tactics and techniques, the MITRE ATT&CK framework, log analysis, and digital forensics fundamentals.
• Knowledge of security frameworks and regulations, including NIST CSF, NIST SP 800-61, CIS Controls, HIPAA, and HITRUST.
• Proven ability to lead, coach, and develop technical staff and to manage third-party service providers.
• Strong analytical and decision-making skills, with the ability to remain calm and effective under pressure.
• Strong written and verbal communication skills with the ability to communicate technical concepts to both technical and non-technical audiences, including executive leadership.
• Ability to manage multiple priorities and work effectively across cross-functional teams.

Preferred Qualifications

• CISSP, CISM, GCIH, GCIA, GCFA, GCED, GSOM, CRISC, or other relevant cybersecurity certifications.
• Experience in a healthcare or other highly regulated environment.

Work Environment

This job functions in a professional home or office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, and fax machines.

Physical Demands

While performing the duties of this job, the employee is regularly required to sit, see, talk, or hear. The employee frequently is required to stand; walk; use hands and fingers to handle or feel; and reach with hands and arms. Visual acuity is necessary for tasks such as reading or working with various forms of data for extended periods. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of the job.

Benefits

Hybrid, remote and flexible on-site work schedules are available, based on the position. PANTHERx Rare Pharmacy also affords an excellent benefit package, including but not limited to medical, dental, vision, health savings and flexible spending accounts, 401K with employer matching, employer-paid life insurance and short/long term disability coverage, and an Employee Assistance Program! Generous paid time off is also available to all full-time employees, as well as limited paid time off for part-time employees. Of course we offer paid holidays too!

Equal Opportunity

PANTHERx Rare Pharmacy is an equal opportunity employer, and does not discriminate in recruiting, hiring, promotions or any term or condition of employment based on race, age, religion, gender, ethnicity, sexual orientation, gender identity, disability, protected veteran's status, or any other characteristic protected by federal, state or local laws.