Director of Security Operations

Accountabilities: Lead the daily operations of the Security Operations Center (SOC), establishing effective processes, priorities, monitoring strategies, and operational standards. Oversee incident response and threat management activities, ensuring security incidents are identified, contained, investigated, and resolved effectively. Develop and evolve security monitoring, threat intelligence, and detection capabilities to improve the organization's ability to identify emerging threats. Lead vulnerability management efforts and help prioritize remediation based on business and security risk. Develop, implement, and maintain security policies, procedures, and operational controls aligned with organizational requirements. Manage security risk by balancing immediate operational needs with longer-term strategies that strengthen the organization's security posture. Anticipate developments in AI and AIOps and assess opportunities to improve automation, log ingestion, monitoring, and incident response while maintaining security quality. Build, manage, and develop a high-performing security operations team through effective hiring, coaching, feedback, goal-setting, and performance management. Establish clear and ambitious objectives, remove roadblocks, and ensure the team consistently delivers against its priorities. Build strong relationships with stakeholders across technology, operations, compliance, and other business functions to increase the effectiveness and reach of security initiatives. Partner with organizational leaders to strengthen the processes and systems protecting sensitive information, patients, employees, and business operations. Support compliance and risk-management activities involving requirements and frameworks such as HIPAA, GDPR, PCI DSS, NIST, ISO 27001, and CIS Controls. Requirements Bachelor’s degree in Computer Science, Information Security, or a related discipline; a master’s degree is preferred. At least 10 years of professional experience in security operations, including a minimum of 5 years in a leadership or management capacity. Proven experience managing a Security Operations Center and leading incident response programs. Strong technical knowledge of security technologies such as SIEM, IDS/IPS, EDR, firewalls, and vulnerability management platforms. Experience working with regulatory and compliance requirements, including HIPAA, GDPR, and PCI DSS. Strong understanding of recognized security frameworks and standards, including NIST, ISO 27001, and CIS Controls. Excellent analytical, problem-solving, and risk-management capabilities, with a proactive and forward-looking approach. Strong leadership and people-development skills, including the ability to provide clear, timely, and actionable feedback. Excellent written, verbal, and interpersonal communication skills, with the ability to influence stakeholders across functions and levels. Ability to manage multiple priorities, navigate high-pressure situations, and make sound decisions in complex or ambiguous environments. Demonstrated ability to collaborate effectively across teams and translate security priorities into meaningful business outcomes. Interest in emerging security technologies, automation, AI, and AIOps, with an ability to identify practical opportunities for improving security operations. Benefits Fully remote work environment within the United States. Flexible work schedules for eligible roles. Health, dental, and vision insurance with the employer covering up to 80% of premiums for employees, dependents, and domestic partners. 21 days of paid time off during the first year. 11 paid holidays and two paid volunteer days. 12 weeks of paid parental leave for all new parents. Six-week paid sabbatical after six years of service. 401(k) plan with up to a 4% employer match. Stock options. Educational assistance and clinical employee reimbursement programs. Opportunities for professional development in a collaborative, innovation-focused environment. A remote-first culture emphasizing work-life flexibility, inclusion, learning, and meaningful impact.