Executive Director, Cyber Defense Operations

CVS Health

Confirmed live yesterday High trust
Closes in 7 days Remote

Quick summary

Work type
Remote
Location
Hartford, CT
Salary
$175,100–$334,750 / yr
Employment
Full-time
Posted
7 days ago
Freshness
Confirmed live yesterday
Closes
Nov 3, 2026 (soon)

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $206k
This role $255k
$142k $355k
below market most similar roles pay here above market

This role pays more than 80% of similar roles. Most pay $165,750–$245,775 — the blue band above. At the midpoint, this role pays about $255k versus about $206k for comparable roles.

Based on 240 similar postings.

Employer

About CVS Health

CVS Health is a leading American healthcare company operating retail pharmacies, pharmacy benefit management services, and a health insurance segment through Aetna, one of the nation''s largest health insurers. Industry: Healthcare & Pharmacy

CVS Health currently has 119 open roles on FindRole.

Listed pay typically runs $106,605–$260,590 across 115 roles with salary data.

Most-posted roles

View all roles at CVS Health

At a glance

TL;DR · Executive Director, Cyber Defense Operations

The Executive Director - Cyber Defense Operations is a senior cybersecurity leader responsible for defining and executing the enterprise-wide strategy, operating model, and capabilities for cyber detection, response, and incident management. This role provides strategic and operational oversight of the Security Operations Center and Computer Security Incident Response Team. Key responsibilities include developing detection content aligned with ATT&CK, ATLAS, and D3FEND frameworks, serving as an Incident Commander during major security events, and leading global teams of Triage, Detection Engineers, and Threat Hunters. The position requires expertise in threat intelligence, threat hunting, advanced analytics, automation, and orchestration, specifically utilizing SOAR, AI, and Machine Learning for anomaly detection and predictive security. The role solves the business problem of identifying, containing, and remediating cyber threats while ensuring regulatory compliance.

What you'll do

  • Develop and execute the enterprise-wide cyber detection, response, and incident management strategy.
  • Provide operational oversight for the Security Operations Center (SOC) and Computer Security Incident Response Team (CSIRT).
  • Serve as the Incident Commander for major security events, coordinating technical teams and executive leadership.
  • Integrate threat intelligence, threat hunting, and advanced analytics into enterprise-scale defense capabilities.
  • Drive the use of AI, automation, and orchestration to improve the speed and scalability of cyber defense.
  • Lead and mentor a global team of detection engineers, threat hunters, and incident response professionals.
  • Provide executive-level briefings and actionable insights regarding cyber threats and organizational resilience.
  • Develop and track KPIs and KRIs aligned with the Detection and Response Maturity Model.

What we're looking for

  • 15+ years of experience in a technical cybersecurity function.
  • 8+ years in a leadership role managing global detection and response, threat hunting, or security operations teams.
  • 5+ years of experience developing and executing a long-term strategic vision for security operations at an enterprise scale.
  • 5+ years of experience leveraging automation and orchestration (e.g., SOAR) to improve SOC efficiency and effectiveness.
  • 2+ years of experience with the application of AI and Machine Learning on security data for anomaly detection and threat modeling.
  • Bachelor’s degree or equivalent experience (High School Diploma and 4 years relevant experience).
  • Experience managing a globally distributed 24/7 security operations team (preferred).
  • Relevant industry certifications like GAIC and CSIRT (preferred).

More like this

Similar roles

Cyber Defense Operations Lead

3M

Austin, TX 33 days ago $287,281–$351,122
SIEM SOAR Incident Response Detection Engineering AWS GCP Azure SecOps MSSP Cyber Threat Intelligence Attack Surface Management AI Automation Cloud Security Case Management
10+ yrs exp

Principal Technical Program Manager, Cyber Defense

TransUnion

Chicago, IL 12 days ago $168,750–$281,250
Cyber Defense Security Operations SOC Detection Engineering Detection and Response Technical Program Management Risk Management Metrics Feedback Loops Remediation Tracking Cross-functional Execution
10+ yrs exp Hybrid

Director, Cyber Assurance

McKesson Corporation

Richmond, VA 14 days ago $150,000–$250,000
Security Architecture Cyber Risk Management GRC Threat Modeling Incident Response Cloud Security Endpoint Telemetry Network Data Tabletop Exercises Phishing Campaigns Asset Management third party risk management CISSP CISM GIAC SSCP
10+ yrs exp

Director, Cyber Threat Intelligence

Target

Brooklyn Park, MN 49 days ago $149,000–$268,000
Cyber Threat Intelligence MITRE ATT&CK SIEM SOAR EDR Vulnerability Management Asset Management Passive DNS Virus Total URLScan Machine Learning Artificial Intelligence Malware Research Phishing DDoS Security Telemetry Incident Response
7+ yrs exp Hybrid

Lead Detection Engineer, Cyber Defense & Response

Prudential Financial

Newark, NJ 36 days ago
Splunk Enterprise Security SPL KQL Python SOAR CI/CD MITRE ATT&CK Cyber Kill Chain Incident Response Threat Hunting Cyber Threat Intelligence Digital Forensics Windows Linux macOS Security Automation Telemetry Pipelines

Cyber Defense & Executive Engagement Lead

Salesforce

McLean, VA +1 13 days ago $172,500–$260,100
Cyber Threat Intelligence MITRE ATT&CK AWS Azure GCP Machine Learning Splunk ElasticSearch Jupyter Notebooks Reverse Engineering Malware Analysis SaaS Incident Response Security Engineering Platform Defense Threat Intelligence Platforms TTPs
8+ yrs exp Hybrid