Manager, Security Operations
Manages Strata's security operations: leading day-to-day threat detection, incident response, monitoring, and vulnerability management, while mentoring a team of security engineers, automating workflows with SIEM/EDR/SOAR and scripting, and aligning practices with HITRUST, ISO 27001, SOC 2, and SOX compliance frameworks.
- Compensation
- $112K–$140K / yr
- Location
- Chicago, IL
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 2+ years
- Category
- Security
- Posted
Skills
Must have
- 5+ years of experience in security operations, blue teaming, or incident response roles
- 2+ years in leadership or supervisory capacity
- Hands-on expertise with security platforms: SIEM, EDR/XDR, threat intel, SOAR, CrowdStrike, Rapid7
- Scripting/automation skills: Python, PowerShell, Bash
- Log analysis, detection engineering, threat hunting
- Experience integrating operations with compliance standards such as HITRUST, ISO 27001, SOC 2, and SOX
- Strong understanding of MITRE ATT&CK, NIST 800-53/800-61, and CIS Controls
- Experience in regulated industries, especially healthcare and PHI environments
- Demonstrated success in creating SOPs, playbooks, and team workflows
- Pragmatic and outcome-oriented; able to align security with business impact
- Proven mentor and leader with a passion for developing others
- Strong communicator with both technical teams and executive stakeholders
- Curious, analytical, and proactive in exploring AI and automation to elevate security outcomes
Nice to have
- Certifications such as GCIH, GCFA, CISSP, CISM
Full description
How you’ll make an impact:
We are seeking an experienced Security Operations Manager to lead and strengthen our security operations function at Strata. In this role, you will oversee day-to-day security operations, including threat detection, incident response, security monitoring, and vulnerability management, while driving improvements in operational efficiency, automation, and risk management. As a hands-on technical leader, you will develop and empower a team of Security Engineers, establish scalable processes, and ensure our security practices align with regulatory and compliance requirements. Partnering closely with IT, Infrastructure, DevOps, and Engineering teams, you will play a critical role in protecting our systems, supporting our customers, and continuously improving Strata's security posture.
- Technical Operations & Incident response
- Lead day-to-day security operations including monitoring, threat detection, triage, investigation, and incident response.
- Operate and tune security platforms such as SIEM, EDR, vulnerability management, and threat intelligence tools.
- Leverage AI and automation tooling to streamline workflows, improve detection fidelity, and reduce manual effort.
- Act as an escalation point for complex incidents, root cause investigations, and cross-team coordination.
- Playbook & Process Development
- Develop and maintain Standard Operating Procedures (SOPs) and incident response playbooks tailored to healthcare-specific threat vectors and compliance obligations.
- Automate repeatable tasks through SOAR platforms, scripting, and AI-enhanced processes.
- Iterate processes and procedures already in place to be more efficient and repeatable.
- Ensure alignment of operational practices with HITRUST CSF, ISO 27001, SOC 2 Type II, and SOX ITGC controls.
- Team Development & Leadership
- Manage and mentor a security operations team to facilitate building deeper expertise in cybersecurity.
- Create a learning-focused culture that encourages knowledge sharing, experimentation, and continuous improvement.
- Foster risk-aware decision-making, enabling the team to act confidently with limited oversight using standardized risk frameworks.
- Governance & Risk Alignment
- Support security-related audits, evidence collection, and control mapping.
- Embed security operations processes into broader risk management and governance activities, contributing to HITRUST certification, ISO audits, and SOC/SOX readiness.
- Cross-Functional Engagement