Manager, Security Operations

Waystar•Lehi, UT

About The Position

ABOUT THIS POSITION The Manager of Security Operations and Engineering manages the Security Operations, Vulnerability Management and Security Engineering teams/processes. The Security Operations team is responsible for conducting 24x7 monitoring and response. They will evaluate threats to the environment and will deploy/record the activities of the Security Incident Response Team. They are responsible for maintaining the operation of the SIEM tool, ensuring proper training for SIRT. Develop metrics around the incident response process and report statuses to management. The Vulnerability Management team is responsible for conducting and reporting on vulnerability scans to detect vulnerabilities in the environment. They will coordinate remediation by the appropriate infrastructure team. Develop metrics around vulnerability management and report status to management. The Security Engineering team is responsible for monitoring and reporting on the implementation of security controls into the infrastructure. Primarily they monitor system configurations and settings to ensure compliance requirements and security operational needs are met. Develop metrics around infrastructure security controls and report status to management. They will research security best practices for new technology. They will work with other teams to establish sound secure architecture in both cloud and traditional environments. They will partner with and provide guidance for other department teams to further improve our overall security posture. WHAT YOU'LL DO Duties: Manage the Security Operations team. Ensure appropriate training for SIRT members. Manage the Vulnerability Management team. Manage the Security Engineering team. Design and establish security processes for on-premise infrastructure. Develop security roadmaps for security functionality to be implemented by infrastructure and application development teams. Lead the selection of security tools. Design implementation and operational processes. Evangelize security. Mentor teams for security best practices. Prioritize and manage complex Security or Technology projects and tasks Other duties as required WHAT YOU'LL NEED Because this is a working Manager position, the candidate must be able to fulfill all the requirements of a Security Engineer. In addition, the candidate must:

Requirements

Have a minimum of 10 years’ experience as a security architect or security engineer
Have a minimum of 15 years’ experience in technology
Have a strong knowledge of security operations, vulnerability management, and security engineering disciplines
Have a strong knowledge of Systems and Network Administration
Have worked on complex projects within a corporate or government environment
Have worked in a regulated environment, specifically within the Financial or Healthcare sectors
Bachelor’s degree in related field or equivalent work experience

Nice To Haves

Certification or an advanced degree in IT or Security disciplines
Knowledge of Security tools, such as vulnerability scanners, application scanners, SIEM, FIM, IDS/IPS, & AV, etc.
Experience in Azure, AWS and/or Google Cloud environments
Experience in researching security best practices
Experience in designing security architecture & systems
Experience in system patching and/or vulnerability management
Experience working in an environment with audit and regulatory compliance requirements
Experience training others
Experience writing technical documentation

Responsibilities

Manage the Security Operations team.
Ensure appropriate training for SIRT members.
Manage the Vulnerability Management team.
Manage the Security Engineering team.
Design and establish security processes for on-premise infrastructure.
Develop security roadmaps for security functionality to be implemented by infrastructure and application development teams.
Lead the selection of security tools.
Design implementation and operational processes.
Evangelize security.
Mentor teams for security best practices.
Prioritize and manage complex Security or Technology projects and tasks
Other duties as required

Benefits

Competitive total rewards (base salary + bonus, if applicable)
Customizable benefits package (3 medical plans with Health Saving Account company match)
We offer generous paid time off for our non-exempt team members, starting with 3 weeks + 13 paid holidays, including 2 personal floating holidays. We also offer flexible time off for our exempt team members + 13 paid holidays
Paid parental leave (including maternity + paternity leave)
Education assistance opportunities and free LinkedIn Learning access
Free mental health and family planning programs, including adoption assistance and fertility support
401(K) program with company match
Pet insurance
Employee resource groups
Waystar is proud to be an equal opportunity workplace. We celebrate, value, and support diversity and inclusion. Qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, marital status, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.