Security Operations Manager

How you’ll make an impact:

We are seeking an experienced Security Operations Manager to lead and strengthen our security operations function at Strata. In this role, you will oversee day-to-day security operations, including threat detection, incident response, security monitoring, and vulnerability management, while driving improvements in operational efficiency, automation, and risk management. As a hands-on technical leader, you will develop and empower a team of Security Engineers, establish scalable processes, and ensure our security practices align with regulatory and compliance requirements. Partnering closely with IT, Infrastructure, DevOps, and Engineering teams, you will play a critical role in protecting our systems, supporting our customers, and continuously improving Strata's security posture. 

• Technical Operations & Incident response 

• Lead day-to-day security operations including monitoring, threat detection, triage, investigation, and incident response. 

• Operate and tune security platforms such as SIEM, EDR, vulnerability management, and threat intelligence tools. 

• Leverage AI and automation tooling to streamline workflows, improve detection fidelity, and reduce manual effort. 

• Act as an escalation point for complex incidents, root cause investigations, and cross-team coordination. 

• Playbook & Process Development 

• Develop and maintain Standard Operating Procedures (SOPs) and incident response playbooks tailored to healthcare-specific threat vectors and compliance obligations. 

• Automate repeatable tasks through SOAR platforms, scripting, and AI-enhanced processes. 

• Iterate processes and procedures already in place to be more efficient and repeatable.  

• Ensure alignment of operational practices with HITRUST CSF, ISO 27001, SOC 2 Type II, and SOX ITGC controls. 

• Team Development & Leadership 

• Manage and mentor a security operations team to facilitate building deeper expertise in cybersecurity. 

• Create a learning-focused culture that encourages knowledge sharing, experimentation, and continuous improvement. 

• Foster risk-aware decision-making, enabling the team to act confidently with limited oversight using standardized risk frameworks. 

• Governance & Risk Alignment 

• Support security-related audits, evidence collection, and control mapping.