Senior SOC Leader: Cyber Defense & Incident Response

CVS Health; Indianapolis (IN); On-site; USD 144,000 - 288,000; Full time

Job summary

CVS Health is seeking a Lead Director to head Security Operations Center (SOC) leadership, threat detection, incident response, and cyber strategy. The role focuses on developing resilient security operations aligned with regulatory requirements and business goals.

You will oversee threat monitoring, response, and modernization initiatives, partnering with cloud, identity, and engineering teams to strengthen overall security posture and incident readiness.

Qualifications

• 10+ years of progressive cybersecurity experience in medium-large environments.
• 5+ years leading Security Operations Center (SOC), Incident Response, Cyber Defense, or Threat Detection teams.
• 5+ years operating and optimizing enterprise security platforms, including SIEM, EDR/XDR, SOAR, and security automation technologies such as Microsoft Sentinel, CrowdStrike Falcon, and Wirespeed.
• 3+ years of demonstrated experience building, managing, and maturing security operations capabilities, including security monitoring, threat hunting, incident response, digital forensics, and security investigations.

Responsibilities

• Lead the strategy, execution, and continuous improvement of the SOC, including threat monitoring, detection, investigation, response, and threat hunting.
• Establish operational processes, service levels, metrics, and reporting to measure effectiveness and support informed decision-making.
• Build and mature SOC capabilities that align security operations to business priorities, risk tolerance, and growth objectives.
• Coordinate incident response and escalation during cybersecurity events and incidents.
• Drive improvements in detection engineering, investigation processes, and response workflows.

Skills

Cybersecurity experience

SOC leadership

Incident response

Digital forensics

Security investigations

Threat detection

Education

Bachelor's degree or equivalent

Tools

Microsoft Sentinel

CrowdStrike Falcon

SIEM

EDR/XDR

SOAR

Wirespeed

Job description

CVS Health is seeking a Lead Director to head Security Operations Center (SOC) leadership, threat detection, incident response, and cyber strategy. The role focuses on developing resilient security operations aligned with regulatory requirements and business goals.

You will oversee threat monitoring, response, and modernization initiatives, partnering with cloud, identity, and engineering teams to strengthen overall security posture and incident readiness.