Security Operations Lead (SecOps)

Job Overview

At Sword, we’re building AI to heal billions and unlock humanity’s full potential.

In doing so, we’re pioneering AI Care, a fundamentally new approach to healthcare built for medical reasoning, safety, and real-time treatment, not generic technology applied after the fact.

Job Description

More than 1 million members across three continents have completed over 15 million AI sessions, helping 2,000+ enterprise clients avoid more than $1 billion in unnecessary healthcare costs.

You'll help structure how this function operates - setting the direction on SIEM architecture, detection engineering, and incident response - and use automation and AI to scale a focused team across a fast-growing, multi-continent footprint.

You'll be a core voice in our security strategy, and the systems, processes, and culture you build will set the bar for how Sword protects 700,000+ members. To get to know more about our Tech Stack, check here .

AI Proficiency at Sword Health AI fluency is a core expectation at Sword Health. Every candidate is assessed against our three-level framework - be ready to share real examples of how AI is already part of how you work.

Key Responsibilities

• At Sword, we’re building AI to heal billions and unlock humanity’s full potential.
• As both a clinical-centric frontier AI lab and an applied AI platform, Sword is reimagining how care is delivered at scale, removing traditional barriers like appointments, waiting rooms, and stigma so more people can access the care they need - and ultimately get back to lives lived in full.
• Backed by 59 clinical studies, 43 patents, and more than $500 million raised from leading investors including Khosla Ventures, General Catalyst, and Founders Fund, Sword is defining a new standard for healthcare.
• Role As Security Operations Lead, you'll lead our SecOps squad and own how Sword detects, investigates, and responds to threats.
• You'll be a core voice in our security strategy, and the systems, processes, and culture you build will set the bar for how Sword protects 700,000+ members.
• Explorer (Level 1) - Uses AI daily to boost personal productivity Builder (Level 2) - Creates workflows and tools that elevate the whole team Integrator (Level 3) - Embeds AI into products and processes at scale Every hire must demonstrate at least Level 1.
• What you’ll be doing Serve as the hands-on technical lead for Sword’s Security Operations Center.
• Setting the technical direction - architecting the SIEM, engineering detection logic, executing incident response, and building the technical roadmap to scale our defenses as the company grows.

Required Skills and Qualifications

• Since 2020, Sword has expanded across Musculoskeletal, Women’s Health, Cardiometabolic, and Mental Health, and is now moving beyond the session to a fully AI-native, 24/7 care program that brings physical activity, therapeutic exercise, psychotherapy, nutrition, and behavior change into one connected experience.
• Explorer (Level 1) - Uses AI daily to boost personal productivity Builder (Level 2) - Creates workflows and tools that elevate the whole team Integrator (Level 3) - Embeds AI into products and processes at scale Every hire must demonstrate at least Level 1.
• What you need to have Required: Public Trust Clearance - Candidates must be able to obtain and maintain a US public trust clearance.
• Bachelor’s degree in Computer Science, Cybersecurity, or equivalent professional experience.
• 7+ years experience in Security Operations Proven experience scaling a SOC through automation and AI - SOAR, hyperautomation, LLM-assisted triage, agentic workflows, or ML-driven detection - with measurable impact on MTTR, coverage, or analyst leverage.
• Hands-on experience structuring a SOC, either building one from the ground up or maturing one through significant transformation - SIEM selection, implementation or migration, detection engineering practice, runbook libraries, on-call rotations, and operating metrics.
• Prior experience as the technical lead of a SOC or CSIRT team - owning the full incident response lifecycle, mentoring analysts and engineers, and acting as on-call/incident commander during major incidents.
• Solid experience in cloud environments (AWS and/or GCP), with strong understanding of cloud-native threats and controls.

Benefits and Perks

• Compensation Additional Information *This range includes base, variable and equity.
• Compensation details listed in this posting reflect the base salary and any potential variable, bonus or sales incentives, and the Company’s estimation of the value of private company stock options, if applicable.
• In addition to our total compensation, Sword offers a number of benefits as listed below.
• US - Sword Benefits & Perks: • Comprehensive health, dental and vision insurance* • Life and AD&D Insurance* • Financial advisory services* • Supplemental Insurance Benefits (Accident, Hospital and Critical Illness)* • Health Savings Account* • Equity shares* • Discretionary PTO plan* • Parental leave* • 401(k) • Flexible working hours • Remote-first company • Paid company holidays • Free digital therapist for you and your family *Eligibility: Full-time employees regularly working 25+ hours per week Note: Applicants must have a legal right to work in the United States, and immigration or work visa sponsorship will not be provided.

Work Location and Schedule

This role is listed as Remote USA with location information shown as Remote USA. The employment type is Full Time.

About the Company

SWORD Health is the organization connected with this listing. USA Jobs Today displays this opportunity for job discovery only, so applicants should verify company details, application instructions, and eligibility on the official employer website.