Manager, Security Operations

Job description

**How you’ll make an impact:** We are seeking an experienced Security Operations Manager to lead and strengthen our security operations function at Strata. In this role, you will oversee day-to-day security operations, including threat detection, incident response, security monitoring, and vulnerability management, while driving improvements in operational efficiency, automation, and risk management. As a hands-on technical leader, you will develop and empower a team of Security Engineers, establish scalable processes, and ensure our security practices align with regulatory and compliance requirements. Partnering closely with IT, Infrastructure, DevOps, and Engineering teams, you will play a critical role in protecting our systems, supporting our customers, and continuously improving Strata's security posture. - Technical Operations & Incident response - Lead day-to-day security operations including monitoring, threat detection, triage, investigation, and incident response. - Operate and tune security platforms such as SIEM, EDR, vulnerability management, and threat intelligence tools. - Leverage AI and automation tooling to streamline workflows, improve detection fidelity, and reduce manual effort. - Act as an escalation point for complex incidents, root cause investigations, and cross-team coordination. - Playbook & Process Development - Develop and maintain Standard Operating Procedures (SOPs) and incident response playbooks tailored to healthcare-specific threat vectors and compliance obligations. - Automate repeatable tasks through SOAR platforms, scripting, and AI-enhanced processes. - Iterate processes and procedures already in place to be more efficient and repeatable. - Ensure alignment of operational practices with HITRUST CSF, ISO 27001, SOC 2 Type II, and SOX ITGC controls. - Team Development & Leadership - Manage and mentor a security operations team to facilitate building deeper expertise in cybersecurity. - Create a learning-focused culture that encourages knowledge sharing, experimentation, and continuous improvement. - Foster risk-aware decision-making, enabling the team to act confidently with limited oversight using standardized risk frameworks. - Governance & Risk Alignment - Support security-related audits, evidence collection, and control mapping. - Embed security operations processes into broader risk management and governance activities, contributing to HITRUST certification, ISO audits, and SOC/SOX readiness. - Cross-Functional Engagement - Collaborate with IT, DevOps, Infrastructure, and R&D Engineering teams to secure critical infrastructure, applications, and workflows. - Advocate for security as a business-enabler by balancing regulatory needs, business objectives, and technical feasibility. - Provide regular operational metrics and risk insights to leadership and stakeholders. **What we’re looking for:** - 5+ years of experience in security operations, blue teaming, or incident response roles. - 2+ years in leadership or supervisory capacity. - Hands-on expertise with - Security platforms: SIEM, EDR/XDR, threat intel, SOAR, CrowdStrike, Rapid7 - Scripting/automation: Python, PowerShell, Bash - Log analysis, detection engineering, threat hunting - Experience integrating operations with compliance standards such as HITRUST, ISO 27001, SOC 2, and SOX. - Strong understanding of MITRE ATT&CK, NIST 800-53/800-61, and CIS Controls. - Experience in regulated industries, especially healthcare and PHI environments. - Demonstrated success in creating SOPs, playbooks, and team workflows. - Certifications such as GCIH, GCFA, CISSP, CISM - Pragmatic and outcome-oriented; able to align security with business impact.