Director of Enterprise Security, Virta Health
$161.5-209k
GCP
Python
Go
Expert level
Remote from US
Diabetes reversal & weight loss treatments
Be an early applicant
Diabetes reversal & weight loss treatments
501-1000 employees
HealthcareB2CPersonal healthMedTech
Be an early applicant
$161.5-209k
GCP
Python
Go
Expert level
Remote from US
501-1000 employees
HealthcareB2CPersonal healthMedTech
Company mission
To reverse metabolic disease in one billion people
Role
Who you are
- 10+ years in security operations, detection and response, or cloud security, including 3+ years leading or mentoring technical security teams
- Hands-on incident response experience: you've worked investigations yourself across logs, endpoints, identity, cloud, and SaaS, and you've led incidents from triage through post-incident review
- Experience writing and maintaining detection rules, ideally in a detection-as-code model, along with a solid understanding of coverage frameworks like MITRE ATT&CK
- Strong scripting or programming skills (e.g., Python, Go) and a track record of building internal tools, integrations, or automation that made a security team faster
- Deep experience owning and tuning security platforms such as SIEM, EDR/XDR, CSPM and SOAR, including onboarding new data sources
- Hands-on cloud security experience, ideally in GCP with containerized workloads
- Practical experience applying AI to security or operational work, beyond basic prompting, such as building AI-assisted workflows, tools, or agents that measurably reduced manual effort
- Clear communicator who can explain technical risk and security strategy to executives, engineering teams, and vendors
- You put people first and take care of yourself, your peers, and our patients equally
- You have a strong sense of ownership and take initiative while empowering others to do the same
- You prioritize positive impact over busy work
- You have no ego and understand that everyone has something to bring to the table regardless of experience
- You appreciate transparency and promote trust and empowerment through open access of information
- You are evidence-based and prioritize data and science over seniority or dogma
- You take risks and rapidly iterate
What the job involves
- As our Director of Enterprise Security, you'll have the rare opportunity to build and shape Virta's security operations function. This is a player-coach role: early on, you'll be hands-on in investigations, detections, and tooling alongside the team, while setting the standards, structure, and direction the function will grow into
- You'll build a team where analysts run investigations end to end, then turn what they learn into new detections, automation, and context that make the next investigation faster and better informed. Blending deep technical skill with a fast, well-practiced incident response capability, you'll keep our systems resilient, our end-user workflows frictionless, and our patient data protected
- Hands-on Engineering & Operational Leadership: Direct, mentor, and grow a high-performing security operations team. Conduct technical sprint planning, alignment, and coaching while maintaining the technical depth to dive into configurations alongside your team
- Build the enterprise security function: Shape the team's structure, hiring plan, and long-term roadmap as we grow, including decisions about where to build in-house, where to partner, and how to invest our security budget for the greatest impact
- Define our SOC operating model: Decide whether we operate in a hybrid or internal model, and design the coverage, on-call, escalation paths, and metrics we use to measure effectiveness
- Own detection engineering and observability: Design and tune detections as code, ensuring version control and testing, across all security platforms
- Lead technical incident response: From triage through post-incident review, you will own the management of security incidents, inter-team collaboration and resolution
- Perform hands-on investigations: Work investigations directly, from log analysis and triage to tracking down identity, cloud, SaaS and endpoint concerns
- Manage and minimize blast radius: Build and evolve automated response capabilities—leveraging threat models and SOAR orchestration—to neutralize threats before they spread
- Lead security platform strategy: Own the platforms that give us security visibility across our systems (CASB, CSPM, CNAPP, and more), and keep them tuned as threats change
- Validate our defenses: Run recurring testing and informed adversary emulation to confirm our posture and the effectiveness of detection and mitigation responses
- Establish clear security expectations for the enterprise systems we adopt, and lead the evaluation of potential vendors, including business associate agreement (BAA) requirements and HITRUST/SOC 2 assurance expectations
- Design AI-assisted capabilities: Not just pasting an alert into Claude, but developing context, tools and guidance to provide security operations the ability to stitch together disparate data effectively
- Partner with GRC to automate compliance: Work closely with the GRC team to automate evidence collection and generation across our security platforms, mapping it to relevant controls
- 90 Day Plan
- Within your first 90 days at Virta, we expect you will do the following:
- First 30 days: Deep dive into Virta’s cloud systems and existing security platforms. Establish collaborative, high-trust relationships with your engineering team, IT and GRC peers. Conduct an assessment of our security operations capabilities
- Day 30-60: Develop your roadmap for the next six months, using your assessment to decide where to formalize and strengthen our security operations standards and processes, with an eye toward integrating our security platforms into a more unified detection and response workflow
- Day 60-90: Start delivering on the roadmap, prioritizing improvements that reduce manual work and strengthen detection and response. Create a security operations maturity dashboard, present it to executive leadership, and use it to set clear, measurable goals for the next six months
Application process
- Deadline to Apply: 28 September 2026 at 08:00 BST
Our take
Much of the care for type 2 diabetes has been based on control and prevention, rather than a direct reversal of the issue. Virta Health is changing that, providing patients with personalized treatment plans, virtual monitoring and patient care.
Instead of depending upon medication, which often needs to be increased over time, the company is tackling the problem at its root and taking a fundamentally different approach that is better for the patient, and more economical for insurers. Among enrolled patients in its clinical trial at one year, 60% achieved diabetes reversal.
While other platforms serve similar markets, the large number of prediabetic and diabetic Americans presents a significant opportunity for growth. The company is well-funded and continues to expand the reach of its telehealth-powered diabetes reversal treatment - positioning itself for widespread adoption as it addressies this critical healthcare challenge.
Steph
Company Specialist at Welcome to the Jungle
Insights
Top investors
4% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Apr 2021
$133m
SERIES E
Dec 2020
$65m
SERIES D
Total funding: $373m
Company benefits
- Remote-first work environment with ability to work from home
- Flexible work hours & time off policy
- Virta pays 99% of all employee health insurance premiums, and 75% for all dependents
- Up to 16 weeks paid parental leave
- Enroll in the Virta treatment for free and give a discount to friends and family
- Internet, home office, learning & development stipends
- Employee Resource Groups like Parents of Virta, Ladies of Virta, and Virtans for DEI
- 401K and ROTH contribution opportunities
Company HQ
Civic Center, Denver, CO
Leadership
Sami Inkinen
(CEO & Co-Founder)Worked on Microsoft’s strategy team for MS Office, and as a consultant for McKinsey & Company. Co-founder of online real estate marketplace Trulia, serving as its COO until its IPO and eventual sale to Zillow Group.
Share this job
View 13 more jobs at Virta Health