SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 161,500 - 209,000 / annual
Virta Health is seeking a Director of Enterprise Security to build and lead the company's security operations function from the ground up. This is a player-coach role combining hands-on technical work with team leadership and strategic direction-setting.
You will direct and mentor a high-performing security operations team while maintaining deep technical involvement in investigations, detections, and tooling. Key responsibilities include:
- Building the enterprise security function: shape team structure, hiring plan, and long-term roadmap; decide on build-vs-partner strategy and security budget allocation.
- Defining the SOC operating model: determine hybrid vs. internal model, design coverage, on-call, escalation paths, and effectiveness metrics.
- Owning detection engineering and observability: design and tune detections as code with version control and testing across all security platforms.
- Leading technical incident response: manage security incidents from triage through post-incident review, ensuring inter-team collaboration and resolution.
- Performing hands-on investigations: work directly on log analysis, triage, and tracking identity, cloud, SaaS, and endpoint concerns.
- Managing blast radius: build automated response capabilities using threat models and SOAR orchestration to neutralize threats before spread.
- Leading security platform strategy: own platforms providing visibility across systems (CASB, CSPM, CNAPP) and keep them tuned as threats evolve.
- Validating defenses: run recurring testing and adversary emulation to confirm posture and detection/mitigation effectiveness.
- Establishing security expectations for enterprise systems and leading vendor evaluation, including BAA and HITRUST/SOC 2 requirements.
- Designing AI-assisted capabilities: develop context, tools, and guidance enabling security operations to integrate disparate data effectively.
- Partnering with GRC: automate evidence collection and compliance mapping across security platforms.
Within 90 days, you will conduct a deep dive into Virta's cloud systems and existing security platforms, establish relationships with engineering, IT, and GRC teams, develop a six-month roadmap, and deliver improvements that reduce manual work and strengthen detection and response.
Virta Health is a venture-backed healthtech company on a mission to reverse metabolic disease, having raised over $350 million. The company partners with major health plans, employers, and government organizations. As a remote-first company, Virta has office hubs in Denver and San Francisco.
REQUIREMENTS:
- 10+ years in security operations, detection and response, or cloud security, including 3+ years leading or mentoring technical security teams.
- Hands-on incident response experience: investigations across logs, endpoints, identity, cloud, and SaaS; led incidents from triage through post-incident review.
- Experience writing and maintaining detection rules, ideally in detection-as-code model, with solid understanding of coverage frameworks like MITRE ATT&CK.
- Strong scripting or programming skills (Python, Go) and track record of building internal tools, integrations, or automation that improved team velocity.
- Deep experience owning and tuning security platforms (SIEM, EDR/XDR, CSPM, SOAR), including onboarding new data sources.
- Hands-on cloud security experience, ideally in GCP with containerized workloads.
- Practical experience applying AI to security or operational work beyond basic prompting, such as building AI-assisted workflows, tools, or agents that measurably reduced manual effort.
- Clear communicator able to explain technical risk and security strategy to executives, engineering teams, and vendors.
