Manager, Security Operations

Strata Decision Technology•Chicago, IL

7d•$112,000 - $140,000

About The Position

Strata is seeking an experienced Security Operations Manager to lead and strengthen its security operations function. The role oversees day-to-day security operations, including threat detection, incident response, security monitoring, and vulnerability management, while improving operational efficiency, automation, and risk management. As a hands-on technical leader, the manager will develop and empower a team of Security Engineers, establish scalable processes, and ensure security practices align with regulatory and compliance requirements. The manager will partner closely with IT, Infrastructure, DevOps, and Engineering teams to protect systems, support customers, and continually improve Strata’s security posture. The role also supports security audits, evidence collection, control mapping, certification and audit readiness, and provides operational metrics and risk insights to leadership and stakeholders.

Requirements

At least 5 years of experience in security operations, blue teaming, or incident response roles.
At least 2 years in a leadership or supervisory capacity.
Hands-on expertise with SIEM, EDR/XDR, threat intelligence, SOAR, CrowdStrike, and Rapid7 security platforms.
Experience with Python, PowerShell, and Bash scripting or automation.
Experience in log analysis, detection engineering, and threat hunting.
Experience integrating security operations with compliance standards such as HITRUST, ISO 27001, SOC 2, and SOX.
Strong understanding of MITRE ATT&CK, NIST 800-53/800-61, and CIS Controls.
Experience in regulated industries, especially healthcare and PHI environments.
Demonstrated success creating SOPs, playbooks, and team workflows.
Pragmatic and outcome-oriented approach, with the ability to align security with business impact.
Strong mentoring and leadership ability, with a passion for developing others.
Strong communication skills with technical teams and executive stakeholders.
Curiosity, analytical ability, and proactivity in exploring AI and automation to improve security outcomes.

Nice To Haves

Certifications such as GCIH, GCFA, CISSP, or CISM.

Responsibilities

Lead day-to-day security operations, including monitoring, threat detection, triage, investigation, and incident response.
Operate and tune SIEM, EDR, vulnerability management, and threat intelligence platforms.
Use AI and automation tools to streamline workflows, improve detection fidelity, and reduce manual effort.
Serve as an escalation point for complex incidents, root cause investigations, and cross-team coordination.
Develop and maintain standard operating procedures and incident response playbooks tailored to healthcare-specific threats and compliance obligations.
Automate repeatable tasks using SOAR platforms, scripting, and AI-enhanced processes.
Improve existing processes and procedures to make them more efficient and repeatable.
Align operational practices with HITRUST CSF, ISO 27001, SOC 2 Type II, and SOX ITGC controls.
Manage and mentor the security operations team, encouraging knowledge sharing, experimentation, and continuous improvement.
Foster risk-aware decision-making and help the team act confidently using standardized risk frameworks.
Support security-related audits, evidence collection, and control mapping.
Integrate security operations processes into risk management and governance activities, contributing to HITRUST certification, ISO audits, and SOC/SOX readiness.
Collaborate with IT, DevOps, Infrastructure, and R&D Engineering teams to secure critical infrastructure, applications, and workflows.
Balance regulatory needs, business objectives, and technical feasibility while advocating for security as a business enabler.
Provide operational metrics and risk insights to leadership and stakeholders.