Manager, Security Operations

Security Operations Manager to lead and strengthen our security operations function at Strata. In this role, you will oversee day-to-day security operations, including threat detection, incident response, security monitoring, and vulnerability management, while driving improvements in operational efficiency, automation, and risk management. As a hands-on technical leader, you will develop and empower a team of Security Engineers, establish scalable processes, and ensure our security practices align with regulatory and compliance requirements. Partnering closely with IT, Infrastructure, DevOps, and Engineering teams, you will play a critical role in protecting our systems, supporting our customers, and continuously improving Strata's security posture.

Responsibilities

Technical Operations & Incident response

• Lead day-to-day security operations including monitoring, threat detection, triage, investigation, and incident response.
• Operate and tune security platforms such as SIEM, EDR, vulnerability management, and threat intelligence tools.
• Leverage AI and automation tooling to streamline workflows, improve detection fidelity, and reduce manual effort.
• Act as an escalation point for complex incidents, root cause investigations, and cross-team coordination.

Playbook & Process Development

• Develop and maintain Standard Operating Procedures (SOPs) and incident response playbooks tailored to healthcare-specific threat vectors and compliance obligations.
• Automate repeatable tasks through SOAR platforms, scripting, and AI-enhanced processes.
• Iterate processes and procedures already in place to be more efficient and repeatable.
• Ensure alignment of operational practices with HITRUST CSF, ISO 27001, SOC 2 Type II, and SOX ITGC controls.

Team Development & Leadership

• Manage and mentor a security operations team to facilitate building deeper expertise in cybersecurity.
• Create a learning-focused culture that encourages knowledge sharing, experimentation, and continuous improvement.
• Foster risk-aware decision-making, enabling the team to act confidently with limited oversight using standardized risk frameworks.

Governance & Risk Alignment

• Support security-related audits, evidence collection, and control mapping.
• Embed security operations processes into broader risk management and governance activities, contributing to HITRUST certification, ISO audits, and SOC/SOX readiness.
• Collaborate with IT, DevOps, Infrastructure, and R&D Engineering teams to secure critical infrastructure, applications, and workflows.
• Advocate for security as a business-enabler by balancing regulatory needs, business objectives, and technical feasibility.
• Provide regular operational metrics and risk insights to leadership and stakeholders.

Requirements

• 5+ years of experience in security operations, blue teaming, or incident response roles.
• 2+ years in leadership or supervisory capacity.
• Hands-on expertise with
• Security platforms: SIEM, EDR/XDR, threat intel, SOAR, CrowdStrike, Rapid7

Scripting/automation: Python, PowerShell, Bash

• Experience integrating operations with compliance standards such as HITRUST, ISO 27001, SOC 2, and SOX.
• Demonstrated success in creating SOPs, playbooks, and team workflows.
• Pragmatic and outcome-oriented; able to align security with business impact.

Preferred

Log analysis, detection engineering, threat hunting

• Strong understanding of MITRE ATT&CK, NIST 800-53/800-61, and CIS Controls.
• Experience in regulated industries, especially healthcare and PHI environments.
• Certifications such as GCIH, GCFA, CISSP, CISM