Remote opportunity at
Virta HealthDirector, Enterprise Secruity
Virta Health operates with a mission to reverse metabolic disease for one billion individuals, tackling conditions like type 2 diabetes, prediabetes, and obesity through virtual care…
Career Tools
About This Role
Virta Health operates with a mission to reverse metabolic disease for one billion individuals, tackling conditions like type 2 diabetes, prediabetes, and obesity through virtual care delivery, personalized nutrition, and technological innovations. Backed by over $350 million from major investors, the organization collaborates with prominent health plans, employers, and government entities. The company operates as a remote-first entity with office hubs located in San Francisco and Denver. Virta Health seeks…
Job Description
Virta Health operates with a mission to reverse metabolic disease for one billion individuals, tackling conditions like type 2 diabetes, prediabetes, and obesity through virtual care delivery, personalized nutrition, and technological innovations. Backed by over $350 million from major investors, the organization collaborates with prominent health plans, employers, and government entities. The company operates as a remote-first entity with office hubs located in San Francisco and Denver.
Virta Health seeks a Director, Enterprise Security to direct and shape the security operations function. Functioning in a player-coach capacity, the professional will initially engage directly in investigations, tooling, and detections alongside the team while establishing long-term structure and standards. This position suits an experienced security practitioner capable of blending deep technical expertise with incident response readiness to safeguard patient data, maintain system resilience, and ensure frictionless workflows for end users.
During the initial ninety days, the incoming director will review cloud systems and security platforms, build collaborative relationships, assess current operations capabilities, construct a six-month roadmap, and present a maturity dashboard to executive leadership. Candidates must adhere to company security and privacy procedures regarding sensitive patient information protected under HIPAA.
Responsibilities
- Direct, mentor, and grow a high-performing security operations team through technical sprint planning, alignment, and coaching
- Shape the enterprise security function structure, hiring plan, and long-term roadmap including in-house versus partnership decisions and budget allocation
- Define the security operations center operating model, coverage, on-call rotations, escalation paths, and performance metrics
- Design and tune detections as code with version control and testing across all security platforms
- Manage technical incident response from triage through post-incident review and inter-team collaboration
- Conduct hands-on investigations involving log analysis, triage, identity, cloud, SaaS, and endpoint concerns
- Build and evolve automated response capabilities using threat models and SOAR orchestration to minimize blast radius
- Own and tune security visibility platforms such as CASB, CSPM, and CNAPP
- Execute recurring testing and adversary emulation to validate defenses and mitigation effectiveness
- Establish enterprise system security expectations and evaluate potential vendors for BAA and HITRUST or SOC 2 compliance
- Develop AI-assisted capabilities, context, tools, and guidance to help operations stitch together disparate data effectively
- Collaborate with the GRC team to automate evidence collection and mapping to relevant controls across security platforms
Requirements
- Ten or more years of experience in security operations, detection and response, or cloud security
- Three or more years of experience leading or mentoring technical security teams
- Hands-on incident response experience spanning logs, endpoints, identity, cloud, and SaaS from triage to post-incident review
- Experience writing and maintaining detection rules using a detection-as-code model and understanding coverage frameworks like MITRE ATT&CK
- Strong scripting or programming abilities in languages such as Python or Go, with a track record of building internal tools or automation
- Deep experience owning and tuning security platforms including SIEM, EDR or XDR, CSPM, and SOAR, along with onboarding data sources
- Hands-on cloud security experience, ideally within GCP with containerized workloads
- Practical experience applying AI to security or operational work to build assisted workflows, tools, or agents that reduce manual effort
- Clear communication skills to explain technical risk and security strategy to executives, engineering teams, and vendors
Core Skills
Benefits
- Location-based compensation structure with starting pay determined by qualifications and experience
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, Virta Health operates as a remote-first company with team members spread across various locations alongside office hubs in Denver and San Francisco. Note that corporate roles are not hired in AK, DE, HI, ME, MS, OK, SD, and VT.
What is the salary range for this role?
The compensation range for the Director, Enterprise Security position is USD 161,500 to 209,000 per year, determined by a location-based compensation structure and commensurate with qualifications and experience.
What is the employment type?
The job posting indicates this is a full-time position.
What are the core experience requirements?
Candidates must have at least ten years of experience in security operations, detection and response, or cloud security, including a minimum of three years leading or mentoring technical security teams.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.