Security Operations Manager

This is a fully remote position, open to applicants in Texas.

📋 Description

• Oversee the daily Cybersecurity Operations Program to safeguard company and client data within a healthcare revenue cycle management setting

• Direct the Security Operations function, encompassing monitoring, detection, investigation, escalation, containment, and remediation

• Supervise SIEM, EDR/XDR, email security, vulnerability management, threat intelligence, and associated security technologies

• Create and sustain security alerts, detection rules, dashboards, use cases, and escalation protocols

• Spearhead cybersecurity incident response, including investigation, containment, recovery, and post-incident analysis

• Maintain and test cybersecurity incident response plans and supporting documentation

• Guide the vulnerability management lifecycle across servers, endpoints, applications, cloud environments, and network infrastructure

• Set risk-based vulnerability prioritization and remediation standards

• Monitor emerging cybersecurity threats and coordinate proactive threat-hunting efforts

• Assess risks associated with ransomware, phishing, business email compromise, credential theft, insider threats, and healthcare data breaches

• Enhance identity and access security measures, including privileged access, MFA, conditional access, and account monitoring

• Assist in security monitoring and response across cloud platforms and SaaS environments

• Ensure compliance with HIPAA, HITRUST, SOC 2, PCI DSS, client security requirements, and other relevant frameworks

• Collaborate with Privacy, Compliance, Legal, and Risk teams on investigations involving sensitive or regulated information

• Lead, mentor, and develop personnel within the Security Operations team

• Establish on-call procedures, incident escalation paths, and after-hours response protocols

• Manage relationships with security technology vendors, managed security service providers, and incident response partners

• Create operational dashboards and reports for Information Security and executive leadership

• Monitor key security and risk indicators, including incident response times, vulnerability remediation, endpoint coverage, phishing trends, and the effectiveness of security controls

• Safeguard ePHI, PII, financial data, client information, and other sensitive materials

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or equivalent education and relevant experience

• 8+ years of advancing cybersecurity or information security experience

• 3+ years of experience in leading security operations, incident response, security engineering, or a similar cybersecurity role

• Proven experience in managing cybersecurity incidents across various technical and business teams

• Strong understanding of SIEM and security monitoring

• Proficient in EDR/XDR technologies

• Solid knowledge of incident response processes

• Comprehensive understanding of vulnerability management

• Expertise in identity and access security

• Thorough knowledge of network security

• Familiarity with email security

• Insight into AI security

• Well-versed in threat intelligence

• Strong grasp of security logging and detection

• Experience in operating security programs in environments managing sensitive or regulated information

• Knowledge of common attack techniques and frameworks such as MITRE ATT&CK

• Exceptional analytical, investigative, organizational, and problem-solving abilities

• Capability to convey complex cybersecurity issues clearly to both technical and non-technical audiences

• Strong organizational and strategic planning capabilities

• Ability to meet deadlines, handle multiple priorities, and resolve complex challenges

• Expertise in incident response

• Proven leadership and team development abilities

• Capacity to balance technical depth with strategic outlook

• Proficient in collaborating across IT, Compliance, Legal, Privacy, Risk, and executive leadership

🏝️ Benefits

• Options for medical, dental, and vision plans

• Company-paid Basic Life and AD&D insurance

• Company-paid short-term disability insurance

• Company-paid long-term disability insurance

• 401(k) retirement savings plan with company matching

• PTO accrual starting on the first day of employment

• Flexible benefit options tailored to individual and family needs