Senior SOC Director: Threat Detection & Response

CVS Health; Montgomery (AL); On-site; USD 144,000 - 288,000; Full time

Job summary

CVS Health is seeking a Lead Director for its Security Operations Center to guide the cybersecurity operations function across a rapidly evolving healthcare business. You will shape threat monitoring, incident response, and resilience programs, aligning security to business goals and regulatory expectations.

You'll build and mentor a high-performing SOC team, drive automation and analytics, and partner with cloud, identity, and engineering teams to strengthen security posture while communicating

Qualifications

• 10+ years of progressive cybersecurity experience within medium-large scale environments.
• 5+ years leading Security Operations Center (SOC), Incident Response, Cyber Defense, or Threat Detection teams.
• 5+ years of experience operating and optimizing enterprise security platforms (SIEM, EDR/XDR, SOAR, and automation).
• 3+ years building, managing, and maturing security operations capabilities (monitoring, threat hunting, IR, forensics).

Responsibilities

• Lead the strategy, execution, and continuous improvement of the SOC, including monitoring, detection, investigation, response, and threat hunting.
• Establish processes, metrics, and reporting to measure effectiveness and support decision-making.
• Build and mature SOC capabilities aligned to business priorities, risk tolerance, and growth.
• Coordinate response during cybersecurity events and incidents with stakeholders across tech and business units.
• Drive improvements in detection engineering, investigation workflows, and incident response times.

Skills

SOC Leadership

Threat Detection

Incident Response

Security Operations

Strategic Planning

Education

Bachelor's degree in Cybersecurity, IT, CS, Engineering or related field

Tools

SIEM

EDR/XDR

SOAR

Microsoft Sentinel

CrowdStrike Falcon

Wirespeed

Job description

CVS Health is seeking a Lead Director for its Security Operations Center to guide the cybersecurity operations function across a rapidly evolving healthcare business. You will shape threat monitoring, incident response, and resilience programs, aligning security to business goals and regulatory expectations.

You'll build and mentor a high-performing SOC team, drive automation and analytics, and partner with cloud, identity, and engineering teams to strengthen security posture while communicating