Senior Director, Security Operations & Threat Defense

CVS Health; Bismarck (ND); On-site; USD 144,000 - 288,000; Full time

Benefits offered by this job

Comprehensive benefits

Bonus eligibility

Job summary

CVS Health leads a world-class SOC to detect, investigate, and respond to cybersecurity threats across a complex healthcare environment. The Lead Director will drive strategy, improve incident response, and coordinate across technical and business stakeholders.

The role emphasizes building resilient security operations, enhancing automation, and aligning security with regulatory requirements while mentoring a high-performing team.

Qualifications

• 10+ years of progressive cybersecurity experience.
• 5+ years leading SOC/IR/Cyber Defense or Threat Detection teams.
• 5+ years operating and optimizing enterprise security platforms (SIEM, EDR/XDR, SOAR, etc.).
• 3+ years building and maturing security operations capabilities.

Responsibilities

• Lead the strategy, execution, and continuous improvement of the SOC and related activities.
• Serve as primary escalation point for significant cyber incidents and coordinate responses.
• Develop standards, processes, controls, and metrics aligned with regulations.
• Drive automation, analytics, and AI-enabled capabilities to strengthen defense.
• Partner with cloud, identity, and engineering teams to enhance security visibility.
• Build and mentor a high-performing security operations team.

Skills

SOC leadership

Threat detection

Incident response

Security operations

Security automation

Digital forensics

Executive communication

Education

Bachelor's degree in Cybersecurity

Tools

Microsoft Sentinel

CrowdStrike Falcon

EDR/XDR tooling

SOAR platforms

Job description

CVS Health leads a world-class SOC to detect, investigate, and respond to cybersecurity threats across a complex healthcare environment. The Lead Director will drive strategy, improve incident response, and coordinate across technical and business stakeholders.

The role emphasizes building resilient security operations, enhancing automation, and aligning security with regulatory requirements while mentoring a high-performing team.