Senior Director, Security Operations Center (SOC)

CVS Health; Tallahassee (FL); On-site; USD 144,000 - 288,000; Full time

Job summary

CVS Health is seeking a Lead Director to lead the Security Operations Center, guiding threat monitoring, detection, and incident response for a dynamic healthcare business. You will establish processes, metrics, and governance to protect critical operations and customer trust while maturing SOC capabilities in line with regulatory expectations.

You will drive strategic resilience initiatives, collaborate with cloud, identity, and engineering teams, and mentor a high-performing security team

Qualifications

• 10+ years of progressive cybersecurity experience within medium-large scale environments.
• 5+ years leading Security Operations Center (SOC), Incident Response, Cyber Defense, or Threat Detection teams.
• 5+ years operating and optimizing enterprise security platforms, including SIEM, EDR/XDR, SOAR, and security automation technologies such as Microsoft Sentinel, CrowdStrike Falcon, and Wirespeed.
• 3+ years building, managing, and maturing security operations capabilities, including security monitoring, threat hunting, incident response, digital forensics, and security investigations.

Responsibilities

• Lead the strategy, execution, and continuous improvement of the SOC with threat monitoring, detection, investigation, response, and threat hunting.
• Establish operational processes, SLAs, metrics, and reporting to measure effectiveness and support decision-making.
• Build and mature SOC capabilities aligned to business priorities, risk tolerance, and growth objectives.
• Ensure readiness, escalation procedures, and coordination during cybersecurity events and incidents.
• Serve as primary escalation point for significant cyber incidents and coordinate cross-stakeholder responses.
• Drive improvements in detection, investigation, and response workflows to reduce risk and improve timelines.
• Develop security operations standards and controls aligned with regulatory requirements and best practices.
• Lead initiatives to strengthen cyber resilience and ransomware readiness.
• Provide leadership visibility into threat activity, performance, and strategic recommendations.
• Oversee security operations across cloud, endpoint, identity, and network environments.
• Drive the use and optimization of security technologies supporting monitoring, detection, investigation, and response.
• Partner with cloud, infrastructure, identity, and engineering teams to improve security visibility and posture.
• Ensure monitoring and threat detection coverage across critical systems and services.
• Build and lead a high-performing security operations team; foster accountability and continuous learning.
• Align team priorities with evolving business needs and threat landscapes.
• Identify opportunities to improve efficiency through process optimization, automation, and standardization.

Skills

Security leadership

Threat detection

Incident response

Strategic planning

Threat intelligence

Regulatory compliance

Education

Bachelor's degree in Cybersecurity / IT / CS / Engineering or related field

Tools

SIEM

EDR/XDR

SOAR

Microsoft Sentinel

CrowdStrike Falcon

Wirespeed

Job description

CVS Health is seeking a Lead Director to lead the Security Operations Center, guiding threat monitoring, detection, and incident response for a dynamic healthcare business. You will establish processes, metrics, and governance to protect critical operations and customer trust while maturing SOC capabilities in line with regulatory expectations.

You will drive strategic resilience initiatives, collaborate with cloud, identity, and engineering teams, and mentor a high-performing security team