Director, Enterprise Security

Virta Health runs a virtual clinic that helps people reverse type 2 diabetes and other metabolic disease, working with large health plans, employers and government organisations. It is remote-first and handles patient data covered by HIPAA.

This is a player-coach role building Virta's security operations function. Early on you would work investigations, detections and tooling yourself while setting the team's structure, hiring plan and roadmap. That covers detection engineering as code, leading incident response from triage to post-incident review, automated response, running the CASB, CSPM and CNAPP platforms, adversary emulation, vendor security reviews, AI-assisted security tooling, and automating compliance evidence with the GRC team.

They want 10+ years in security operations, detection and response or cloud security, including 3+ years leading technical security teams, and real hands-on incident response experience across logs, endpoints, identity and cloud.

Pay is $161,500 to $209,000, depending on location and experience. Remote in the US, excluding a handful of states.