EmpiRx Health

Compensation

Full Description

Job Description: • Lead and oversee 24x7 SOC operations, including internal teams and/or managed security partners. • Own threat detection, triage, investigation, and response processes. • Drive improvements in mean time to detect (MTTD), mean time to respond (MTTR), and incident response maturity. • Define and operationalize SIEM/SOAR use cases, playbooks, and automation. • Ensure effective monitoring across endpoints, cloud, identity, and network layers. • Coordinate incident response with internal teams, legal, compliance, and external partners. • Lead post-incident reviews and continuous improvement programs. • Develop SOC metrics, dashboards, and executive reporting. • Own the enterprise IAM program, including identity lifecycle processes for joiners, movers, and leavers. • Drive role-based access control (RBAC) and least-privilege enforcement. • Implement and manage Privileged Access Management (PAM/PIM). • Oversee MFA, SSO, conditional access, and authentication standards. • Lead access governance, certification campaigns, and audit readiness. Requirements: • 5–7+ years of cybersecurity experience, including leadership experience. • Strong hands-on expertise in SOC operations, including SIEM, EDR, threat detection, threat hunting and incident response. • Strong hands-on expertise in IAM, including RBAC, SSO, MFA, PAM/PIM, and lifecycle automation. • Experience with cloud security; Azure and Microsoft ecosystem experience strongly preferred. • Knowledge of security frameworks and requirements, including NIST CSF, SOC 2, and HIPAA. • Proven experience managing incident response and access governance programs. Benefits: • Paid Time Off • 401(k) program • Health Insurance including Dental & Vision coverage • Student Loan Reimbursement • Health Savings Account • Employee Assistance Program