Director, Security Engineering

Virta Health

Virta Health director leading cloud security engineering and SecOps for virtual metabolic-care delivery. Driving Zero Trust, incident response, and patient-data protection.

Posted 8/6/2026full-timeRemote • 🇺🇸 United StatesLead💰 $161,500 - $209,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Cybersecurity and Cloud Security Architecture, with a strong focus on Zero Trust principles and incident response management. Proven ability to lead and mentor high-performing security teams while operationalizing risk-based vulnerability management and integrating security into CI/CD processes.

Highest-signal resume keywords

Cybersecurity LeadershipCloud Security ArchitectureIncident Response ManagementZero Trust ArchitectureRisk-Based Vulnerability Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityCloud Infrastructure SecurityMicro-SegmentationWorkload Identity ControlsCI/CD SecurityRisk Prioritization FrameworksZero Trust Maturity ModelsAI System ArchitectureAutomation WorkflowsTelemetry Pipelines

Soft Skills

Analytical CapabilityExceptional Communication

Tools & Technologies

MDR/SOC Vendor ManagementSIEM PlatformsEDR/XDR ToolsetsGCPGitHub Security Configurations

Industry Keywords

HIPAA ComplianceSecurity OperationsData Topology MapContainment PlaybooksThreat Containment

Tech Stack

Tools & technologies

CloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Lead Virta’s Enterprise Security Engineering and Security Operations functions as a player-coach.
Direct, mentor, and grow a high-performing security engineering team.
Conduct technical sprint planning, alignment, and coaching while maintaining hands-on technical depth.
Lead the enterprise-wide transition to Zero Trust Architecture across IT, corporate platforms, and cloud engineering infrastructure.
Own monitoring, detection engineering, incident response, and outsourced 24/7 MDR/SOC vendor relationships.
Ensure telemetry pipelines, alert triage, and threat containment operate effectively.
Design and maintain blast-radius reduction solutions, including micro-segmentation and ephemeral Workload Identity controls.
Curate the Data Topology Map, CAA Matrix, Workload Ledger, and technical Containment Playbooks.
Operationalize risk-based vulnerability management and define patching and remediation SLAs.
Collaborate with GRC, IT, and Product teams to integrate security into CI/CD and apply guardrails to enterprise AI tools.
Within 90 days, assess ZTMM maturity, deliver baseline topology and attack-surface artifacts, audit MDR pipelines, secure GitHub configurations, pilot GCP VPC-SC boundaries, standardize containment playbooks, and present security operations and ZTA metrics to executives.

Requirements

What you’ll need

10+ years of dedicated experience in cybersecurity, cloud infrastructure security, or SecOps.
At least 3+ years managing, leading, or mentoring high-performing security teams.
Experience overseeing incident response programs and managing external vendors, including outsourced MDR/SOC partners, SIEM platforms, and EDR/XDR toolsets.
Deep technical expertise in cloud security architecture, ideally GCP.
Hands-on experience building micro-segmentation models, establishing ephemeral workload identity controls, and securing CI/CD pipelines.
Exceptional analytical capability for systemic mapping, risk prioritization frameworks, RBVM, and Zero Trust Maturity Models.
Proven experience architecting durable AI systems or automation workflows that solve cross-functional challenges and improve business efficiency.
Experience designing and implementing repeatable AI-enabled workflows that address team bottlenecks and improve efficiency.
Exceptional communication skills for conveying complex security strategies to non-technical leaders and external stakeholders.
Ability to comply with Virta security and privacy procedures for HIPAA-governed patient information.
Legally authorized to work in the United States.
Must answer whether employment-visa sponsorship will be required.

Benefits

Comp & perks

Location-based compensation structure
Remote-first work arrangement
Access to office hubs in Denver and San Francisco
Security and privacy training
Benefits information provided on Virta’s Careers page