Security Operations Manager
New
G
GetixHealthHealthcare cybersecurity
Source API remote eligibility restrictions: United States; Location: RemoteFull-TimeManager
Salary130,000 - 153,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 8+ years of progressive cybersecurity or information security experience; 3+ years of experience leading security operations, incident response, security engineering, or a comparable cybersecurity function
- Required Skills
- HIPAA
Requirements
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or equivalent education and relevant experience.
- 8+ years of progressive cybersecurity or information security experience.
- 3+ years leading security operations, incident response, security engineering, or a comparable cybersecurity function.
- Demonstrated experience managing cybersecurity incidents across multiple technical and business teams.
- Working knowledge of SIEM and security monitoring, EDR/XDR, incident response, vulnerability management, identity and access security, network security, email security, AI security, threat intelligence, and security logging and detection.
- Experience operating security programs in environments handling sensitive or regulated information.
- Knowledge of common attack techniques and frameworks such as MITRE ATT&CK.
- Travel up to 10%, as needed.
Responsibilities
- Lead security monitoring, detection, investigation, escalation, containment, and remediation.
- Oversee SIEM, EDR/XDR, email security, vulnerability management, threat intelligence, and related technologies.
- Develop and maintain security alerts, detection rules, dashboards, use cases, escalation procedures, incident response plans, and playbooks.
- Lead incident response activities, including investigation, containment, recovery, and post-incident review.
- Lead vulnerability management across servers, endpoints, applications, cloud environments, and network infrastructure.
- Monitor emerging threats and coordinate threat hunting; identify risks such as ransomware, phishing, credential theft, and insider threats.
- Strengthen identity and access security, including privileged access, MFA, conditional access, and account monitoring.
- Partner with IT, Privacy, Compliance, Legal, Risk, and executive leadership on security operations and investigations involving sensitive information.
- Lead and develop Security Operations personnel, and manage security vendors and incident response partners.
- Develop operational reports and track security and risk indicators for Information Security and executive leadership.
View Full Description & ApplyYou'll be redirected to the employer's site
