Cyber Security-Team Lead -BF-24921-30844-2-JR182225

Position Title:

Cyber Security-Team Lead -BF-24921-30844-2-JR182225

Job Family:

IFT > Engineering​/Dev

Shift:

Job Description:

ABOUT ELEVANCE HEALTH

Elevance Health is a leading health company in America dedicated to improving lives and communities and making healthcare simpler.  It is the largest managed health care company in the Blue Cross Blue Shield (BCBS) Association serving more than 46 million lives across 14 states. 
 

A regular in the Fortune 500 list, Elevance ranked 20 in 2025. Gail Boudreaux, President and CEO of Elevance has been a consistent name in the Fortune list of most powerful women and currently holds 53rd rank on this list. 
 

ABOUT CARELON

Carelon Global Solutions (CGS) is a healthcare solutions company that is simplifying complex operational processes to improve the health of the healthcare system.

Previously known as Legato Health Technologies, Carelon Global Solutions (hereinafter, CGS) underwent a name change and joined the Carelon family of brands in January 2023, as a fully owned subsidiary of Elevance Health (Previously Anthem Inc.). CGS brings together a global team of like-minded innovators who manage and optimize operational processes for health plans as well as providers.

Our brightest minds housed across our global headquarters in Indianapolis as well as Bengaluru, Hyderabad and Gurugram in India, Manila in the Philippines, Limerick in Ireland and San Juan in Puerto Rico bring with them innovative capabilities and an unmatched depth of experience. This global team uniquely positions CGS to enable scalable, next-generation platforms and specialized digital tools that make healthcare operations more practical, effective and efficient.

OUR MISSION & VALUES

Our Mission: Improving Lives and Communities. Simplifying Healthcare. Expecting More.
Our Values: Leadership | Community | Integrity | Agility | Diversity

JOB POSITION

JOB RESPONSIBILITY

This role is for Cyber Security Threat Management, investigating escalated (tier 2) security incidents, driving process improvement by making recommendations for automation changes and detection logic tuning, remediating vulnerability findings discovered in threat hunts, and other responsibilities necessary to support the CSTM/CSOC. This is a people manager and technical expert role responsible for a team of analysts and engineers.

QUALIFICATION

This position requires a BS/BA degree in Cyber Security, Information Technology, Computer Science or a similar major and at least 5 years of proven experience in investigating and remediating Cyber Security Incidents; or any combination of education and experience, which would provide an equivalent background. Effective communication skills supporting the ability to communicate highly technical details in layman’s terms are required. Proven experience that demonstrates the ability to understand and investigate complex cyber security incidents. 

EXPERIENCE

Min 5 years of experience in investigating security incidents such as malicious software, phishing emails, and malicious websites using EDR tools, host-based analysis, data platforms such as Splunk, and network or email security tools. In depth understanding of the MITRE ATT&CK framework and experience applying the framework to active investigations to enrich findings. Proven experience investigating and mitigating threats from known threat actor groups or known malicious software and the ability to identify them in high-stress environments. Proven experience filling a leadership role in a Security Operations Center environment with strong communication skills.  Proven experience leading incident response teams during critical incidents and in high-stress environments. 

SKILLS AND COMPETENCIES

Primary Skills - MITRE ATT&CK framework, EDR tools, Splunk & Network/Email Security tools.

• Investigating (tier 2) security and behavioral based incidents.
• Managing security analysts & engineers in various duties including but not limited to triaging and investigating security and behavioral based alerts, monitoring security tool health, maintaining security posture by enforcing security policies, and responding to inquiries and security related escalations.
• Ensuring high quality output by reviewing tier 1 analyst work, providing feedback and coaching team members towards a high level of performance.
• Scheduling shift work to provide coverage for overnight, weekend, and holiday shifts.
• Writing performance reviews, conducting new-hire interviews, providing job training, and other duties necessary to ensure staff growth and development.
• Assisting with security incident escalations from the Cyber Security Incident Response Team and Threat Hunting Team.
• Monitoring security tool health and responding to outages.
• Assisting with tuning of detection logic and automation to improve security posture.
• Developing response actions and playbooks for established use cases.

THE CARELON PROMISE

Aligning with our brand belief of ‘limitless minds are our biggest asset’, we offer a world of limitless opportunities to our associates.

It is our strong belief that one is committed to a role when it is not just what the role entails, but also what lies in its periphery that completes the value circle for an associate.

This world of limitless opportunities thrives in an environment that fosters growth and well-being, and gives you purpose and the feeling of belonging.

LIFE @ CARELON

• Extensive focus on learning and development
• An inspiring culture built on innovation, creativity, and freedom.
• Holistic well-being
• Comprehensive range of rewards and recognitions
• Competitive health and medical insurance coverage
• Best-in-class amenities and workspaces
• Policies designed with associates at the center.

EQUAL OPPORTUNITY EMPLOYER

Carelon is committed to a diverse and inclusive workplace and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics.

Reasonable Accommodation

Our inclusive culture empowers Carelon to deliver the best results for our customers. We not only celebrate the diversity of our workforce, but we also celebrate the diverse ways we work.

If you have a disability and need accommodation such as an interpreter or a different interview format, please ask for the Reasonable Accommodation Request Form.

Job Type:

Full time