Director, Enterprise Security

🔥 2 minutes ago

🇺🇸 United States – Remote

💵 $161.5k - $209k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Virta Health

WebsiteLinkedInAll Job Openings

201 - 500 employees

🏥 Healthcare

⚕️ Healthcare Insurance

🧘 Wellness

Healthcare • Healthcare Insurance • Wellness

Virta Health is a healthcare company focused on reversing type 2 diabetes and promoting sustainable weight loss through a nutrition-first approach. The company offers personalized treatment plans that help individuals reduce or eliminate the need for diabetes medications. Virta collaborates with organizations and healthcare providers to deliver transformative outcomes in metabolic care. Their approach is evidence-backed, emphasizing the importance of lifestyle and dietary changes to achieve lasting health improvements and weight management.

📋 Description

• Direct, mentor, and grow a high-performing security operations team • Conduct technical sprint planning, alignment, and coaching • Build and shape Virta’s enterprise security function, including team structure, hiring plan, roadmap, and security budget strategy • Define the SOC operating model, coverage, on-call processes, escalation paths, and effectiveness metrics • Design and tune detections as code across security platforms • Lead security incidents from triage through post-incident review • Perform investigations across logs, identity, cloud, SaaS, and endpoints • Build automated response capabilities using threat models and SOAR orchestration to minimize blast radius • Own security visibility platforms including CASB, CSPM, and CNAPP • Run recurring testing and adversary emulation to validate defenses • Establish enterprise security expectations and evaluate vendors, including BAA and HITRUST/SOC 2 requirements • Develop AI-assisted security operations capabilities that integrate disparate data • Partner with GRC to automate compliance evidence collection and map evidence to controls • Assess security operations capabilities during the first 30 days • Develop a six-month security operations roadmap during days 30–60 • Begin roadmap delivery, create a security operations maturity dashboard, and present measurable goals to executive leadership during days 60–90

🎯 Requirements

• 10+ years in security operations, detection and response, or cloud security • 3+ years leading or mentoring technical security teams • Hands-on incident response experience across logs, endpoints, identity, cloud, and SaaS • Experience leading incidents from triage through post-incident review • Experience writing and maintaining detection rules, ideally using a detection-as-code model • Solid understanding of MITRE ATT&CK and coverage frameworks • Strong scripting or programming skills, such as Python or Go • Track record of building internal tools, integrations, or automation • Deep experience owning and tuning SIEM, EDR/XDR, CSPM, and SOAR platforms • Experience onboarding new security data sources • Hands-on cloud security experience, ideally in GCP with containerized workloads • Practical experience applying AI to security or operational work beyond basic prompting • Clear communication skills for explaining technical risk and security strategy to executives, engineering teams, and vendors • Ability to follow security and privacy procedures for HIPAA-governed patient information • Must be legally authorized to work in the United States • Corporate roles are not hired in AK, DE, HI, ME, MS, OK, SD, or VT

🏖️ Benefits

• Location-based compensation structure • Remote-first work arrangement • Office hubs in Denver and San Francisco • Security and privacy training provided • Benefits information available on Virta’s Careers page