Manager, Security Operations

Strata Decision Technology•Chicago, IL

22d

About The Position

Strata is seeking an experienced Security Operations Manager to lead and strengthen its security operations function. The manager oversees day-to-day security operations, including threat detection, incident response, security monitoring, and vulnerability management, while improving operational efficiency, automation, and risk management. This hands-on technical leadership role develops and empowers a team of Security Engineers, establishes scalable processes, and aligns security practices with regulatory and compliance requirements. The role partners closely with IT, Infrastructure, DevOps, and Engineering teams to protect systems, support customers, and continuously improve Strata’s security posture. The manager operates and tunes security platforms, serves as an escalation point for complex incidents, and develops procedures and playbooks tailored to healthcare-specific threat vectors and compliance obligations. The role automates repeatable tasks and supports audits, evidence collection, control mapping, certification, and audit readiness. It also collaborates across technical teams, balances regulatory needs with business objectives and technical feasibility, and provides operational metrics and risk insights to leadership and stakeholders. Strata’s preferred location for open roles is Chicago, Illinois. The company values in-person connection and regularly hosts on-campus events. Compensation is estimated at $112,000–$140,000 in base pay, with actual salary determined by factors including skills and experience. Strata also provides discretionary variable pay programs based on role and a benefits package that includes retirement benefits, health and welfare benefits, paid time off, parental leave, life and accident insurance, and other voluntary and well-being benefits.

Requirements

At least 5 years of experience in security operations, blue teaming, or incident response roles.
At least 2 years in a leadership or supervisory capacity.
Hands-on expertise with SIEM, EDR/XDR, threat intelligence, and SOAR platforms, including CrowdStrike and Rapid7.
Experience with Python, PowerShell, or Bash for scripting and automation.
Experience in log analysis, detection engineering, and threat hunting.
Experience integrating security operations with HITRUST, ISO 27001, SOC 2, and SOX compliance standards.
Strong understanding of MITRE ATT&CK, NIST 800-53/800-61, and CIS Controls.
Experience in regulated industries, especially healthcare and PHI environments.
Demonstrated success creating SOPs, playbooks, and team workflows.
Pragmatic, outcome-oriented approach and ability to align security with business impact.
Proven mentoring and leadership ability, with a passion for developing others.
Strong communication skills with technical teams and executive stakeholders.
Curiosity, analytical skills, and a proactive approach to using AI and automation to improve security outcomes.

Nice To Haves

Certifications such as GCIH, GCFA, CISSP, or CISM.

Responsibilities

Lead day-to-day security operations, including monitoring, threat detection, triage, investigation, and incident response.
Operate and tune SIEM, EDR, vulnerability management, and threat intelligence platforms.
Use AI and automation tooling to streamline workflows, improve detection fidelity, and reduce manual effort.
Escalate and coordinate complex incidents and root-cause investigations across teams.
Develop and maintain standard operating procedures and incident response playbooks tailored to healthcare threat vectors and compliance obligations.
Automate repeatable tasks through SOAR platforms, scripting, and AI-enhanced processes; improve existing procedures for efficiency and repeatability.
Align operational practices with HITRUST CSF, ISO 27001, SOC 2 Type II, and SOX ITGC controls.
Manage and mentor the security operations team, encourage knowledge sharing and continuous improvement, and foster risk-aware decision-making.
Support security audits, evidence collection, and control mapping.
Integrate security operations into risk management and governance activities and contribute to HITRUST certification, ISO audits, and SOC/SOX readiness.
Collaborate with IT, DevOps, Infrastructure, and R&D Engineering to secure critical infrastructure, applications, and workflows.
Balance regulatory needs, business objectives, and technical feasibility while advocating for security as a business enabler.
Provide operational metrics and risk insights to leadership and stakeholders.