Senior Director, Security Operations & Threat Response

Koitecc Solutions; Cheyenne (WY); On-site; USD 144,000 - 288,000; Full time

Job summary

CVS Health is seeking a Lead Director of Security Operations Center (SOC) to lead cybersecurity operations for a healthcare organization. You will drive threat monitoring, investigation, response, and threat hunting while aligning SOC capabilities with business priorities and risk tolerance.

You will build processes, establish metrics, and mentor a high-performing team, coordinating across cloud, endpoint, identity, and network security to strengthen defenses and resilience.

Qualifications

• 10+ years of progressive cybersecurity experience within medium-large scale environments.
• 5+ years leading Security Operations Center (SOC), Incident Response, Cyber Defense, or Threat Detection teams.
• 5+ years operating and optimizing enterprise security platforms, including SIEM, EDR/XDR, SOAR, and security automation technologies such as Microsoft Sentinel, CrowdStrike Falcon, and Wirespeed.
• 3+ years of demonstrated experience building, managing, and maturing security operations capabilities, including security monitoring, threat hunting, incident response, digital forensics, and security investigations.

Responsibilities

• Lead the strategy, execution, and continuous improvement of the Security Operations Center, including threat monitoring, detection, investigation, response, and threat hunting activities.
• Establish operational processes, service levels, metrics, and reporting to measure effectiveness and support informed decision-making.
• Build and mature SOC capabilities that align security operations to business priorities, risk tolerance, and growth objectives.
• Ensure operational readiness, escalation procedures, and effective coordination during cybersecurity events and incidents.
• Serve as the primary escalation point for significant cyber incidents and coordinate response efforts across technical and business stakeholders.
• Drive improvements in detection engineering, investigation processes, and response workflows to reduce risk and improve response times.
• Leverage automation, analytics, and AI-enabled capabilities to improve operational efficiency and strengthen cyber defense outcomes.
• Develop and maintain security operations standards, processes, and controls aligned with regulatory requirements and industry best practices.
• Lead initiatives that strengthen cyber resilience, incident preparedness, ransomware response readiness, and recovery capabilities.
• Provide leadership with visibility into threat activity, operational performance, emerging risks, and strategic recommendations.
• Support regulatory, audit, and risk management activities related to cybersecurity operations.
• Lead security operations across cloud, endpoint, identity, and network environments.
• Drive the effective use and continuous optimization of security technologies supporting monitoring, detection, investigation, and response functions.
• Partner with cloud, infrastructure, identity, and engineering teams to improve security visibility, response capabilities, and overall security posture.
• Ensure appropriate monitoring and threat detection coverage across critical systems, applications, and business services.
• Build, develop, and lead a high-performing team of security operations professionals.
• Foster a culture of accountability, collaboration, innovation, and continuous learning.
• Provide mentorship, coaching, and career development opportunities to strengthen team capability and succession depth.
• Align team priorities and resources to evolving business needs, threat landscapes, and organizational objectives.
• Identify opportunities to improve efficiency through process optimization, automation, and standardization.
• Establish meaningful metrics and reporting that demonstrate operational performance, effectiveness, and risk reduction.
• Drive continuous improvement initiatives that enhance the maturity, scalability, and effectiveness of security operations capabilities.
• Collaborate with stakeholders across technology and business functions to ensure security operations remains aligned with organizational priorities.

Skills

SOC Leadership

Cybersecurity experience

Threat Detection

Incident Response

Security Automation

SIEM/XDR/SOAR

Cloud Security

Zero Trust

Security Governance

Education

Bachelor's degree

Tools

Microsoft Sentinel

CrowdStrike Falcon

Wirespeed

Job description

CVS Health is seeking a Lead Director of Security Operations Center (SOC) to lead cybersecurity operations for a healthcare organization. You will drive threat monitoring, investigation, response, and threat hunting while aligning SOC capabilities with business priorities and risk tolerance.

You will build processes, establish metrics, and mentor a high-performing team, coordinating across cloud, endpoint, identity, and network security to strengthen defenses and resilience.