Director, Enterprise Security

Virta Health

. Direct, mentor, and grow a high-performing security operations team .

Posted 10/14/2026full-timeRemote • United StatesLead💰 $161,500 - $209,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in security operations, incident response, and team leadership, with a strong focus on developing and implementing security strategies and automation. Proficient in leveraging advanced security tools and frameworks to enhance organizational security posture and compliance.

Highest-signal resume keywords

Security Operations LeadershipIncident Response ManagementDetection As CodeCloud Security ExpertiseAutomation and Integration Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security OperationsIncident ResponseDetection Rules WritingScripting (Python, Go)SIEM ManagementEDR/XDR ManagementCSPM ManagementSOAR PlatformsAI Application in SecurityMITRE ATT&CK Framework

Soft Skills

Clear CommunicationMentoringTeam Leadership

Tools & Technologies

CASBCSPMCNAPPSIEMEDRXDRSOARCloud Security Platforms

Certifications & Qualifications

HITRUSTSOC 2

Industry Keywords

Security Budget StrategySecurity VisibilityCompliance Evidence CollectionHIPAA ComplianceAdversary Emulation

Tech Stack

Tools & technologies

CloudGoogle Cloud PlatformPythonGo

About the role

Key responsibilities & impact

Direct, mentor, and grow a high-performing security operations team
Conduct technical sprint planning, alignment, and coaching
Build and shape Virta’s enterprise security function, including team structure, hiring plan, roadmap, and security budget strategy
Define the SOC operating model, coverage, on-call processes, escalation paths, and effectiveness metrics
Design and tune detections as code across security platforms
Lead security incidents from triage through post-incident review
Perform investigations across logs, identity, cloud, SaaS, and endpoints
Build automated response capabilities using threat models and SOAR orchestration to minimize blast radius
Own security visibility platforms including CASB, CSPM, and CNAPP
Run recurring testing and adversary emulation to validate defenses
Establish enterprise security expectations and evaluate vendors, including BAA and HITRUST/SOC 2 requirements
Develop AI-assisted security operations capabilities that integrate disparate data
Partner with GRC to automate compliance evidence collection and map evidence to controls
Assess security operations capabilities during the first 30 days
Develop a six-month security operations roadmap during days 30–60
Begin roadmap delivery, create a security operations maturity dashboard, and present measurable goals to executive leadership during days 60–90

Requirements

What you’ll need

10+ years in security operations, detection and response, or cloud security
3+ years leading or mentoring technical security teams
Hands-on incident response experience across logs, endpoints, identity, cloud, and SaaS
Experience leading incidents from triage through post-incident review
Experience writing and maintaining detection rules, ideally using a detection-as-code model
Solid understanding of MITRE ATT&CK and coverage frameworks
Strong scripting or programming skills, such as Python or Go
Track record of building internal tools, integrations, or automation
Deep experience owning and tuning SIEM, EDR/XDR, CSPM, and SOAR platforms
Experience onboarding new security data sources
Hands-on cloud security experience, ideally in GCP with containerized workloads
Practical experience applying AI to security or operational work beyond basic prompting
Clear communication skills for explaining technical risk and security strategy to executives, engineering teams, and vendors
Ability to follow security and privacy procedures for HIPAA-governed patient information
Must be legally authorized to work in the United States
Corporate roles are not hired in AK, DE, HI, ME, MS, OK, SD, or VT

Benefits

Comp & perks

Location-based compensation structure
Remote-first work arrangement
Office hubs in Denver and San Francisco
Security and privacy training provided
Benefits information available on Virta’s Careers page