← All roles

Director, Enterprise Secruity

Virta Health· Product Development
Apply on company site
Remote$161.5k - $209kFull-timePosted 4d ago

About the role

Director of Enterprise Security at Virta Health, responsible for building and leading the security operations function, blending hands-on investigations with long-term strategic leadership to protect patient data and maintain secure end-user workflows.

Responsibilities

  • Hands-on Engineering & Operational Leadership: Direct, mentor, and grow a high-performing security operations team. Conduct technical sprint planning, alignment, and coaching while maintaining the technical depth to dive into configurations alongside your team.
  • Build the enterprise security function: Shape the team's structure, hiring plan, and long-term roadmap as we grow, including decisions about where to build in-house, where to partner, and how to invest our security budget for the greatest impact.
  • Define our SOC operating model: Decide whether we operate in a hybrid or internal model, and design the coverage, on-call, escalation paths, and metrics we use to measure effectiveness.
  • Own detection engineering and observability: Design and tune detections as code, ensuring version control and testing, across all security platforms.
  • Lead technical incident response: From triage through post-incident review, you will own the management of security incidents, inter-team collaboration and resolution.
  • Perform hands-on investigations: Work investigations directly, from log analysis and triage to tracking down identity, cloud, SaaS and endpoint concerns.
  • Manage and minimize blast radius: Build and evolve automated response capabilities—leveraging threat models and SOAR orchestration—to neutralize threats before they spread.
  • Lead security platform strategy: Own the platforms that give us security visibility across our systems (CASB, CSPM, CNAPP, and more), and keep them tuned as threats change.
  • Validate our defenses: Run recurring testing and informed adversary emulation to confirm our posture and the effectiveness of detection and mitigation responses.
  • Establish clear security expectations for the enterprise systems we adopt, and lead the evaluation of potential vendors, including business associate agreement (BAA) requirements and HITRUST/SOC 2 assurance expectations.
  • Design AI-assisted capabilities: Not just pasting an alert into Claude, but developing context, tools and guidance to provide security operations the ability to stitch together disparate data effectively.
  • Partner with GRC to automate compliance: Work closely with the GRC team to automate evidence collection and generation across our security platforms, mapping it to relevant controls.

Qualifications

  • 10+ years in security operations, detection and response, or cloud security, including 3+ years leading or mentoring technical security teams.
  • Hands-on incident response experience: you've worked investigations yourself across logs, endpoints, identity, cloud, and SaaS, and you've led incidents from triage through post-incident review.
  • Experience writing and maintaining detection rules, ideally in a detection-as-code model, along with a solid understanding of coverage frameworks like MITRE ATT&CK.
  • Strong scripting or programming skills (e.g., Python, Go) and a track record of building internal tools, integrations, or automation that made a security team faster.
  • Deep experience owning and tuning security platforms such as SIEM, EDR/XDR, CSPM and SOAR, including onboarding new data sources.
  • Hands-on cloud security experience, ideally in GCP with containerized workloads.
  • Practical experience applying AI to security or operational work, beyond basic prompting, such as building AI-assisted workflows, tools, or agents that measurably reduced manual effort.
  • Clear communicator who can explain technical risk and security strategy to executives, engineering teams, and vendors.

Skills

Required:Security operations leadershipIncident responseDetection engineeringSecurity platformsCloud security (GCP)
Nice to have:AI in security

Benefits

  • Virta’s values-driven culture and remote-first team
  • Security and privacy training provided
  • Location-based compensation with starting pay range disclosed
  • Opportunity to impact healthcare technology at scale
  • AI interview resources and modern recruiting tools included
Last updated Oct 22, 2026. Interested? Apply on the company site.

About Virta Health

Sustainable Weight Loss and Diabetes Reversal

Virta Health is the leader in diabetes reversal and sustainable weight loss with a nutrition-first approach.

diabetes reversalweight lossnutrition
Company profileWebsite

More open roles at Virta Health