Manager, Security Operations

How you’ll make an impact:

We are seeking an experienced Security Operations Manager to lead and strengthen our security operations function at Strata. In this role, you will oversee day-to-day security operations, including threat detection, incident response, security monitoring, and vulnerability management, while driving improvements in operational efficiency, automation, and risk management. As a hands-on technical leader, you will develop and empower a team of Security Engineers, establish scalable processes, and ensure our security practices align with regulatory and compliance requirements. Partnering closely with IT, Infrastructure, DevOps, and Engineering teams, you will play a critical role in protecting our systems, supporting our customers, and continuously improving Strata's security posture. 

• Technical Operations & Incident response 

• Lead day-to-day security operations including monitoring, threat detection, triage, investigation, and incident response. 

• Operate and tune security platforms such as SIEM, EDR, vulnerability management, and threat intelligence tools. 

• Leverage AI and automation tooling to streamline workflows, improve detection fidelity, and reduce manual effort. 

• Act as an escalation point for complex incidents, root cause investigations, and cross-team coordination. 

• Playbook & Process Development 

• Develop and maintain Standard Operating Procedures (SOPs) and incident response playbooks tailored to healthcare-specific threat vectors and compliance obligations. 

• Automate repeatable tasks through SOAR platforms, scripting, and AI-enhanced processes. 

• Iterate processes and procedures already in place to be more efficient and repeatable.  

• Ensure alignment of operational practices with HITRUST CSF, ISO 27001, SOC 2 Type II, and SOX ITGC controls. 

• Team Development & Leadership 

• Manage and mentor a security operations team to facilitate building deeper expertise in cybersecurity. 

• Create a learning-focused culture that encourages knowledge sharing, experimentation, and continuous improvement. 

• Foster risk-aware decision-making, enabling the team to act confidently with limited oversight using standardized risk frameworks. 

• Governance & Risk Alignment 

• Support security-related audits, evidence collection, and control mapping. 

• Embed security operations processes into broader risk management and governance activities, contributing to HITRUST certification, ISO audits, and SOC/SOX readiness. 

• Cross-Functional Engagement 

• Collaborate with IT, DevOps, Infrastructure, and R&D Engineering teams to secure critical infrastructure, applications, and workflows. 

• Advocate for security as a business-enabler by balancing regulatory needs, business objectives, and technical feasibility. 

• Provide regular operational metrics and risk insights to leadership and stakeholders. 

What we’re looking for: 

• 5+ years of experience in security operations, blue teaming, or incident response roles. 

• 2+ years in leadership or supervisory capacity. 

• Hands-on expertise with 

• Security platforms: SIEM, EDR/XDR, threat intel, SOAR, CrowdStrike, Rapid7 

• Scripting/automation: Python, PowerShell, Bash 

• Log analysis, detection engineering, threat hunting 

• Experience integrating operations with compliance standards such as HITRUST, ISO 27001, SOC 2, and SOX. 

• Strong understanding of MITRE ATT&CK, NIST 800-53/800-61, and CIS Controls. 

• Experience in regulated industries, especially healthcare and PHI environments. 

• Demonstrated success in creating SOPs, playbooks, and team workflows. 

• Certifications such as GCIH, GCFA, CISSP, CISM 

• Pragmatic and outcome-oriented; able to align security with business impact. 

• Proven mentor and leader with a passion for developing others. 

• Strong communicator with both technical teams and executive stakeholders. 

• Curious, analytical, and proactive in exploring AI and automation to elevate security outcomes. 

Estimated Salary Range: $112,000 - $140,000

Actual salary will be determined based on factors including, but not limited to, skill set and level of experience. This salary range is a good faith estimate of base pay. Strata also provides discretionary variable pay programs based on role. In addition, Strata provides a comprehensive benefits package including retirement benefits, health and welfare benefits, paid time off, parental leave, life and accident insurance, and other voluntary and well-being benefits.