Senior Director, Security Operations & Threat Response

CVS Health; Santa Fe (NM); On-site; USD 144,000 - 288,000; Full time

Job summary

CVS Health is seeking a Lead Director of Security Operations Center to guide the cybersecurity operations for a large healthcare business. You will oversee threat monitoring, incident response, and resilience initiatives, aligning security operations with regulatory requirements and business priorities.

The role requires building a high-performing SOC, developing metrics, and mentoring a team of security professionals while driving automation and threat intelligence to strengthen overall cyber

Qualifications

• 10+ years of progressive cybersecurity experience in large environments.
• 5+ years leading SOC, Incident Response, or Threat Detection teams.
• 5+ years operating and optimizing enterprise security platforms (SIEM, EDR/XDR, SOAR).
• 3+ years building and maturing security operations capabilities.

Responsibilities

• Lead the strategy and operations of the SOC, including monitoring, detection, and response.
• Establish processes, SLAs, metrics, and reporting to measure effectiveness.
• Develop and mature SOC capabilities aligned to business priorities and risk.
• Coordinate response across technical and business stakeholders during incidents.
• Drive automation, analytics, and AI-enabled improvements.
• Define security standards, controls, and regulatory alignment.
• Partner with cloud, identity, and platform teams to strengthen security posture.
• Mentor and develop security operations talent and succession planning.

Skills

SOC leadership

Threat detection

Incident response

Cybersecurity strategy

Security operations maturity

Education

Bachelor's degree (Cybersecurity/IT/CS/Engineering)

Tools

SIEM

EDR/XDR

SOAR

Microsoft Sentinel

CrowdStrike Falcon

Wirespeed

Job description

CVS Health is seeking a Lead Director of Security Operations Center to guide the cybersecurity operations for a large healthcare business. You will oversee threat monitoring, incident response, and resilience initiatives, aligning security operations with regulatory requirements and business priorities.

The role requires building a high-performing SOC, developing metrics, and mentoring a team of security professionals while driving automation and threat intelligence to strengthen overall cyber