Senior Director, Security Operations Center

CVS Health; Sacramento (CA); On-site; USD 144,000 - 288,000; Full time

Job summary

CVS Health is seeking a Lead Director for the Security Operations Center to guide cybersecurity operations, ensuring effective detection, investigation, response, and recovery across the organization. You will shape processes, metrics, and threat intelligence to protect critical operations and customer trust.

You will lead a high-performing team, drive automation and analytics, and collaborate with cross-functional partners to strengthen cyber resilience and regulatory compliance across cloud,

Qualifications

• 10+ years of progressive cybersecurity experience within medium-large scale environments.
• 5+ years leading SOC, incident response, cyber defense, or threat detection teams.
• 3+ years building and maturing security operations capabilities including monitoring, threat hunting, incident response, and forensics.

Responsibilities

• Lead the strategy, execution, and continuous improvement of the SOC with threat monitoring, detection, investigation, response, and threat hunting.
• Establish operational processes, service levels, metrics, and reporting.
• Build and mature SOC capabilities aligned with business priorities and growth.
• Ensure readiness and escalation during cyber events and incidents.
• Drive improvements in detection engineering, investigation processes, and response workflows.

Skills

SOC leadership

Threat monitoring

Incident response

Security automation

Regulatory compliance

Security metrics & reporting

Education

Bachelor's degree in Cybersecurity, IT, CS, Engineering

Tools

Microsoft Sentinel

CrowdStrike Falcon

SOAR

EDR/XDR

Wirespeed

Job description

CVS Health is seeking a Lead Director for the Security Operations Center to guide cybersecurity operations, ensuring effective detection, investigation, response, and recovery across the organization. You will shape processes, metrics, and threat intelligence to protect critical operations and customer trust.

You will lead a high-performing team, drive automation and analytics, and collaborate with cross-functional partners to strengthen cyber resilience and regulatory compliance across cloud,