Manager, Detection & Investigative Operations - Remote based in the US

Tenet Health is seeking a Manager of Detection & Investigative Operations with previous Information Security experience to work in our Dallas, TX corporate office on a hybrid schedule or remotely if outside DFW. Below is a brief outline of what Tenet is seeking for this role. Reporting to the Director of Detection and Response within the enterprise Cybersecurity organization, the Manager of Detection & Investigative Operations will oversee the activities of the 24x7 Detection and Response Center and all analysts and engineers, ensuring that Detection and Response operations are performed in accordance to policy, standards and security best practices. This role has direct responsibility for the effective and efficient operations of the Detection and Response Center including security monitoring, detection, triage, initial response, escalation handoffs, and threat intelligence to the Incident Response team. The position will be responsible for driving transformation and maturity of processes, workflows, and overall capabilities, process refinement and implementation, cross-team discipline collaboration, maintenance of internal and external stakeholder relationships, and supervision of staff. The Manager of Detection & Investigative Operations will work closely with the Managed Security Service Provider to ensure the continuous improvement of the Detection and Response capabilities and that SLAs, SOPs, Events and Alert Management are all in line with the standards of Tenet. The Manager of Detection & Investigative Operations will work closely with their peer, the Incident Response Manager, on investigations, incidents, and threat hunting as needed. Equally, the Manager of Detection & Investigative Operations will work to ensure there are clear processes and escalation points to hand off alerts/events from the Detection and Response team to the IR Team as deemed appropriate based on the security and scope of the event. The Manager of Detection & Investigative Operations will manage and mature the Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) platforms. Lastly, the Manager of Detection & Investigative Operations will lead a transformative effort to embed automation and AI across the analyst and engineering workflows. Originally posted on Himalayas