Director of Security Engineering

Join Virta, a transformative healthcare company, as the Director of Security Engineering & Operations. In this critical role, you will lead our Enterprise Security Engineering and Security Operations functions, spearheading our transition to Zero Trust Architecture while managing our outsourced 24/7 Managed Detection and Response partner. You will direct and mentor a high-performing team of security engineers, oversee our monitoring and incident response program, and collaborate closely with cross-functional teams. Enjoy a remote-first work environment, flexible hours, and comprehensive benefits.

• Diriger les fonctions d'ingénierie de sécurité d'entreprise et d'opérations de sécurité, en supervisant une équipe d'ingénieurs talentueux et en possédant la défense opérationnelle de l'entreprise.
• Spearhead la transition vers l'architecture Zero Trust (ZTA), en restreignant le mouvement latéral et en contenant le rayon d'explosion, tout en gérant un partenaire de détection et de réponse géré 24/7.
• Diriger la transition à l'échelle de l'entreprise vers l'architecture Zero Trust, en établissant l'identité comme périmètre, en inhibant le mouvement latéral et en priorisant la survie des données.

• Exceptional communication skills with the ability to convey complex technical security strategies to non-technical business leaders and external stakeholders
• 10+ years of dedicated experience in Cybersecurity, Cloud Infrastructure Security, or SecOps, with at least 3+ years managing, leading, or mentoring high-performing security teams
• Proven track record of architecting durable AI systems or automation workflows that solve cross-functional challenges, resolve operational bottlenecks, and deliver measurable improvements to business efficiency
• Successfully designed and implemented repeatable AI-enabled workflows that address team bottlenecks and improve efficiency
• Demonstrated experience overseeing incident response programs and managing external vendors (such as 24/7 outsourced MDR/SOC partners, SIEM platforms, and EDR/XDR toolsets)
• Deep technical expertise in cloud security architecture (ideally GCP), with hands-on experience building micro-segmentation models, establishing ephemeral workload identity controls, and securing CI/CD pipelines
• Exceptional analytical capability to map systemic relationships, formulate risk prioritization frameworks (RBVM), and apply Zero Trust Maturity Models to live corporate structures