Senior Director Security Operations Center & Cyber Defense

CVS Health; Nashville (TN); On-site; USD 144,000 - 288,000; Full time

Job summary

CVS Health is seeking a Lead Director of the Security Operations Center to guide cybersecurity operations for a rapidly evolving healthcare business. You will ensure effective detection, investigation, response, and recovery from threats, while aligning processes with business priorities, risk tolerance, and regulatory expectations.

You will lead a high‑performing SOC, drive improvements in threat detection, incident response, and automation, and partner with cloud, identity, and engineering

Qualifications

• 10+ years of progressive cybersecurity experience within medium-large scale environments.
• 5+ years leading Security Operations Center (SOC), Incident Response, Cyber Defense, or Threat Detection teams.
• 5+ years of Sexperience operating and optimizing enterprise security platforms, including SIEM, EDR/XDR, SOAR, and security automation technologies such as Microsoft Sentinel, CrowdStrike Falcon, and Wirespeed.
• 3+ years of demonstrated experience building, managing, and maturing security operations capabilities, including security monitoring, threat hunting, incident response, digital forensics, and security investigations.

Responsibilities

• Lead the strategy, execution, and continuous improvement of the Security Operations Center, including threat monitoring, detection, investigation, response, and threat hunting activities.
• Establish operational processes, service levels, metrics, and reporting to measure effectiveness and support informed decision-making.
• Build and mature SOC capabilities that align security operations to business priorities, risk tolerance, and growth objectives.
• Ensure operational readiness, escalation procedures, and effective coordination during cybersecurity events and incidents.
• Serve as the primary escalation point for significant cyber incidents and coordinate response efforts across technical and business stakeholders.
• Drive improvements in detection engineering, investigation processes, and response workflows to reduce risk and improve response times.
• Leverage automation, analytics, and AI-enabled capabilities to improve operational efficiency and strengthen cyber defense outcomes.
• Develop and maintain security operations standards, processes, and controls aligned with regulatory requirements and industry best practices.
• Lead initiatives that strengthen cyber resilience, incident preparedness, ransomware response readiness, and recovery capabilities.
• Provide leadership with visibility into threat activity, operational performance, emerging risks, and strategic recommendations.
• Support regulatory, audit, and risk management activities related to cybersecurity operations.

Skills

Cybersecurity leadership

SOC leadership

Threat detection & response

Security platforms (SIEM/EDR/XDR/SOAR)

Education

Bachelor's degree in Cybersecurity, IT, CS, Engineering, or related field

Tools

SIEM

EDR/XDR

SOAR

Microsoft Sentinel

CrowdStrike Falcon

Job description

CVS Health is seeking a Lead Director of the Security Operations Center to guide cybersecurity operations for a rapidly evolving healthcare business. You will ensure effective detection, investigation, response, and recovery from threats, while aligning processes with business priorities, risk tolerance, and regulatory expectations.

You will lead a high‑performing SOC, drive improvements in threat detection, incident response, and automation, and partner with cloud, identity, and engineering