Lead, Security Operations (Cybersecurity)

Location: Richmond, Virginia hybrid for Virginia residents within 50 miles of a hirify.global | CareScout office; remote applicants must reside in North Carolina, Maryland, Virginia, or the DC Metro area. Applicants outside the 50-mile radius should expect approximately 25% travel. Core working hours target 9am–5pm EST.

Salary: $120,900–$187,000 national base salary range, plus eligibility for a performance-based bonus incentive.

Company

hirify.global and CareScout develop ways to help people find, fund, and understand aging care while supporting families throughout the aging experience.

What you will do

• Lead the Computer Security Incident Response Team (CSIRT), setting priorities, developing capabilities, and maintaining accountability for incident readiness.
• Direct cybersecurity incidents through triage, investigation, containment, eradication, recovery, and post-incident review.
• Coordinate response across Cybersecurity, Technology, business functions, external providers, Legal, Privacy, Compliance, Risk, Communications, and Business Continuity.
• Maintain incident response plans, playbooks, severity criteria, escalation procedures, metrics, and reporting.
• Translate technical findings into business impact, response options, leadership updates, and notification assessments.
• Lead tabletop exercises, investigations, evidence preservation, forensic analysis, and improvements driven by threat intelligence and lessons learned; use AI and automation to identify and respond to threats at machine speed.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or 7+ years of equivalent relevant experience.
• Significant progressive experience in cybersecurity operations and incident response, including leadership of a CSIRT or comparable response function.
• Experience directing complex incidents and coordinating response across technical teams, business stakeholders, and external partners.
• Strong knowledge of investigation, containment, eradication, and recovery across endpoint, network, identity, and cloud environments.
• Experience with SIEM, EDR, and security orchestration and automation tools.
• Working knowledge of digital forensics, evidence handling, threat intelligence, and attacker tactics, techniques, and procedures.
• Experience developing response plans, playbooks, escalation frameworks, readiness exercises, and performance measures.
• Ability to lead technical professionals, maintain operational discipline, and communicate technical issues and business impacts to senior and nontechnical audiences.
• Experience in a regulated environment, preferably financial services or insurance, including partnership with Legal, Privacy, Risk, and Compliance. Must support incident escalations outside normal business hours.

Nice to have

• Certifications such as CISSP, GCIH, GCFA, or comparable incident response credentials.

Culture & Benefits

• Inclusive, purpose-driven environment focused on simplifying and dignifying the aging experience.
• Hybrid or remote work options subject to residence, office-distance, and travel requirements.
• Healthcare coverage, 401(k) plans, employer-funded retirement contributions, paid holidays, paid family leave, and volunteer time off.
• Disability, life, and long-term care insurance, caregiver and mental health support, and employee assistance resources.
• Tuition reimbursement, student loan repayment, and training and certification support.
• The role is not eligible for employment visa sponsorship.