Manager – Security Operations

How you’ll make an impact:

We are seeking an experienced Security Operations Manager to lead and strengthen our security operations function at Strata. In this role, you will oversee day-to-day security operations, including threat detection, incident response, security monitoring, and vulnerability management, while driving improvements in operational efficiency, automation, and risk management. As a hands-on technical leader, you will develop and empower a team of Security Engineers, establish scalable processes, and ensure our security practices align with regulatory and compliance requirements. Partnering closely with IT, Infrastructure, DevOps, and Engineering teams, you will play a critical role in protecting our systems, supporting our customers, and continuously improving Strata's security posture.

• Technical Operations & Incident response

• Lead day-to-day security operations including monitoring, threat detection, triage, investigation, and incident response.

• Operate and tune security platforms such as SIEM, EDR, vulnerability management, and threat intelligence tools.

• Leverage AI and automation tooling to streamline workflows, improve detection fidelity, and reduce manual effort.

• Act as an escalation point for complex incidents, root cause investigations, and cross-team coordination.

• Playbook & Process Development

• Develop and maintain Standard Operating Procedures (SOPs) and incident response playbooks tailored to healthcare-specific threat vectors and compliance obligations.

• Automate repeatable tasks through SOAR platforms, scripting, and AI-enhanced processes.

• Iterate processes and procedures already in place to be more efficient and repeatable. 

• Ensure alignment of operational practices with HITRUST CSF, ISO 27001, SOC 2 Type II, and SOX ITGC controls.

• Team Development & Leadership

• Manage and mentor a security operations team to facilitate building deeper expertise in cybersecurity.

• Create a learning-focused culture that encourages knowledge sharing, experimentation, and continuous improvement.

• Foster risk-aware decision-making, enabling the team to act confidently with limited oversight using standardized risk frameworks.

• Governance & Risk Alignment

• Support security-related audits, evidence collection, and control mapping.

• Embed security operations processes into broader risk management and governance activities, contributing to HITRUST certification, ISO audits, and SOC/SOX readiness.

• Cross-Functional Engagement

• Collaborate with IT, DevOps, Infrastructure, and R&D Engineering teams to secure critical infrastructure, applications, and workflows.

• Advocate for security as a business-enabler by balancing regulatory needs, business objectives, and technical feasibility.

• Provide regular operational metrics and risk insights to leadership and stakeholders.

What we’re looking for:

• 5+ years of experience in security operations, blue teaming, or incident response roles.

• 2+ years in leadership or supervisory capacity.

• Hands-on expertise with
  • Security platforms: SIEM, EDR/XDR, threat intel, SOAR, CrowdStrike, Rapid7
  • Scripting/automation: Python, PowerShell, Bash
  • Log analysis, detection engineering, threat hunting

• Experience integrating operations with compliance standards such as HITRUST, ISO 27001, SOC 2, and SOX.

• Strong understanding of MITRE ATT&CK, NIST 800-53/800-61, and CIS Controls.

• Experience in regulated industries, especially healthcare and PHI environments.

• Demonstrated success in creating SOPs, playbooks, and team workflows.

• Certifications such as GCIH, GCFA, CISSP, CISM

• Pragmatic and outcome-oriented; able to align security with business impact.

• Proven mentor and leader with a passion for developing others.

• Strong communicator with both technical teams and executive stakeholders.

• Curious, analytical, and proactive in exploring AI and automation to elevate security outcomes.

Estimated Salary Range: $112,000 - $140,000

Actual salary will be determined based on factors including, but not limited to, skill set and level of experience. This salary range is a good faith estimate of base pay. Strata also provides discretionary variable pay programs based on role. In addition, Strata provides a comprehensive benefits package including retirement benefits, health and welfare benefits, paid time off, parental leave, life and accident insurance, and other voluntary and well-being benefits.