Envista Security Operations & Engineering Lead (Brea/Irvine, CA)
Core
Strategic and hands-on Security Operations and Engineering Lead responsible for SOC leadership, detection engineering, incident response, and security platform architecture.
Role type
Senior IC Security Operations & Engineering Lead
Builds
Scalable security operations, detection lifecycle, incident response programs, and security platform capabilities (SIEM, SOAR, EDR/XDR, CSPM, DLP, identity, cloud security)
Domain
Cybersecurity / Security Operations
Required skills
Security operations leadership, detection engineering, incident response, security platform architecture, MSSP/MDR management, SIEM expertise, cloud security (Azure/AWS/GCP), enterprise security strategy, Zero Trust principles, executive advisory
Preferred skills
Multiyear capability roadmap definition, global SOC transformation, major incident response leadership, CISSP/CISM/CCSP, GIAC, Microsoft Security, Splunk, CrowdStrike, AWS/Azure/GCP security certifications
Technologies
Microsoft Sentinel, Splunk, QRadar, Chronicle, SIEM, SOAR, EDR/XDR, CSPM, DLP, Azure, AWS, GCP
Responsibilities
Lead enterprise security operations including monitoring, triage, investigation, escalation, and response; Define and govern the operating model across internal SOC and MSSP/MDR partners; Develop and recommend the Security Operations & Engineering domain strategy and investment roadmap; Drive automation across triage, enrichment, containment, and reporting workflows; Provide domain leadership for the enterprise incident response program including playbooks and major incident direction; Build detection engineering lifecycle from hypothesis to retirement; Shape exposure management, asset inventory visibility, and attack surface monitoring; Build and lead high-performing security operations and engineering teams
Seniority
Senior, hands-on IC with strategic leadership