Назад
Company hidden
5 дней назад

Director of Enterprise Security

161 500 - 209 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
director
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Director of Enterprise Security (Cloud Security/AI): Building and leading Virta Health’s enterprise security operations function, including detection engineering, incident response, security platforms, and automated compliance with an accent on cloud security, AI-assisted operations, and protection of patient data. Focus on designing the SOC operating model, investigating incidents across identity, cloud, SaaS, and endpoints, and building automation that reduces manual effort and limits blast radius.

Location: Remote within the United States; corporate roles are not hired in Alaska, Delaware, Hawaii, Maine, Mississippi, Oklahoma, South Dakota, or Vermont.

Salary: $161,500–$209,000 base salary.

Company

hirify.global develops technology, personalized nutrition, and virtual care solutions to help reverse metabolic disease and protect sensitive patient data.

What you will do

  • Lead, mentor, and grow the security operations team while providing hands-on technical direction, sprint planning, coaching, and configuration support.
  • Build the enterprise security function, including its structure, hiring plan, roadmap, budget priorities, and decisions about internal versus partner capabilities.
  • Define the SOC operating model, including coverage, on-call practices, escalation paths, and effectiveness metrics.
  • Own detection engineering, observability, security platforms, and detection-as-code practices across CASB, CSPM, CNAPP, SIEM, EDR/XDR, and SOAR capabilities.
  • Lead incident response from triage through post-incident review and perform investigations across logs, identity, cloud, SaaS, and endpoints.
  • Build automated response, adversary emulation, AI-assisted workflows, vendor security evaluations, and automated GRC evidence collection.

Requirements

  • 10+ years of experience in security operations, detection and response, or cloud security, including 3+ years leading or mentoring technical security teams.
  • Hands-on incident response experience across logs, endpoints, identity, cloud, and SaaS, including leading incidents from triage through post-incident review.
  • Experience writing and maintaining detection rules, ideally using a detection-as-code model, with a solid understanding of coverage frameworks such as MITRE ATT&CK.
  • Strong scripting or programming skills in technologies such as Python or Go, with experience building internal tools, integrations, or automation that improved security-team efficiency.
  • Deep experience owning and tuning SIEM, EDR/XDR, CSPM, and SOAR platforms, including onboarding new data sources.
  • Hands-on cloud security experience, ideally in GCP with containerized workloads.
  • Practical experience applying AI to security or operational work by building AI-assisted workflows, tools, or agents beyond basic prompting.
  • Ability to explain technical risk and security strategy clearly to executives, engineering teams, and vendors.

Culture & Benefits

  • Remote-first work with office hubs in Denver and San Francisco.
  • Culture centered on people first, ownership, impact, no ego, transparency, evidence-based decisions, and taking risks with rapid iteration.
  • Work involves protecting patient information governed by HIPAA; security and privacy training is provided.
  • Location-based compensation structure with a stated base salary range of $161,500–$209,000.

Hiring process

  • The recruiting process may use AI-powered tools for application review, candidate screening, and interview note taking.
  • Final hiring decisions are made by hirify.global personnel.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →