Director, Enterprise Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead, mentor, and develop a high-performing security operations team.

• Facilitate technical sprint planning, alignment, and coaching.

• Establish and shape Virta’s enterprise security function, including team organization, hiring strategy, roadmap, and security budget approach.

• Define the SOC operating model, coverage, on-call procedures, escalation paths, and effectiveness metrics.

• Create and refine detections as code across various security platforms.

• Manage security incidents from triage through post-incident analysis.

• Conduct investigations across logs, identity, cloud, SaaS, and endpoints.

• Develop automated response capabilities using threat models and SOAR orchestration to reduce blast radius.

• Oversee security visibility platforms such as CASB, CSPM, and CNAPP.

• Execute regular testing and adversary emulation to assess defenses.

• Set enterprise security expectations and evaluate vendors, including BAA and HITRUST/SOC 2 requirements.

• Create AI-assisted security operations capabilities that unify disparate data.

• Collaborate with GRC to automate compliance evidence gathering and align evidence with controls.

• Evaluate security operations capabilities within the first 30 days.

• Construct a six-month security operations roadmap during days 30–60.

• Initiate roadmap execution, develop a security operations maturity dashboard, and present measurable objectives to executive leadership during days 60–90.

⛳️ Requirements

• Over 10 years of experience in security operations, detection and response, or cloud security.

• More than 3 years of experience leading or mentoring technical security teams.

• Practical incident response experience across logs, endpoints, identity, cloud, and SaaS.

• Proven experience managing incidents from triage through post-incident evaluation.

• Proficient in writing and maintaining detection rules, preferably using a detection-as-code model.

• Strong understanding of MITRE ATT&CK and coverage frameworks.

• Excellent scripting or programming skills, such as Python or Go.

• Demonstrated history of developing internal tools, integrations, or automation.

• Extensive experience with SIEM, EDR/XDR, CSPM, and SOAR platforms.

• Experience in integrating new security data sources.

• Hands-on experience in cloud security, ideally with GCP and containerized workloads.

• Practical experience in applying AI to security or operational tasks beyond basic prompting.

• Strong communication skills for articulating technical risks and security strategies to executives, engineering teams, and vendors.

• Ability to adhere to security and privacy protocols for HIPAA-regulated patient information.

• Must be legally authorized to work in the United States.

• Corporate positions are not available in AK, DE, HI, ME, MS, OK, SD, or VT.

🏝️ Benefits

• Compensation structure based on location.

• Remote-first work environment.

• Office hubs located in Denver and San Francisco.

• Comprehensive security and privacy training provided.

• Information regarding benefits can be found on Virta’s Careers page.