{"id":3445943,"url":"https://alion.io/job/genworth-financial-lead-security-operations","title":"Lead, Security Operations","company":{"id":184323,"name":"Genworth Financial","domain":"genworth.com","url":"https://alion.io/company/genworth-financial-inc","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Richmond, United States","Washington, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":120900,"max":187000,"currency":"USD","period":"year","gross":null,"usd_annual":187000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-28T00:00:00Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-02T03:17:44Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"About Us\nAt Genworth and CareScout, we’re on a mission to simplify and dignify the aging experience.\nThe truth is, most of us will help a parent, spouse, family member, friend, or neighbor navigate aging and care at some point in our lives. We’ve been there ourselves. That’s why we’re building better ways to help people find, fund, and understand aging care all while being supported every step of the way. \nWe’re a team of curious problem-solvers, compassionate listeners, and people who care about making a difference. We value diverse perspectives and are committed to fostering an inclusive culture where every team member feels respected, supported, and empowered to bring their authentic self.\nOur four values guide our strategy, our decisions, and our interactions:\nMake it human. We care about the people that make up our customers, colleagues, and communities.\nMake it about others. We do what'sbest for our customers and collaborate to drive progress.\nMake it happen. We work with intention toward a common purpose and forge ways forward together.\nMake it better. We create fulfilling purpose-driven careers by learning from the world and each other.\nIf you’re looking to build a meaningful career while helping transform the aging experience for millions of families, we’d love to hear from you.\nPOSITION TITLE\nLead, Security Operations\nPOSITION LOCATION\nThis position is available to Virginia residents as Richmond, VA hybrid in-office applicants or remote applicants residing in North Carolina, Maryland, Virginia, DC Metro.\n* A Hybrid schedule of both Remote and In-Office days would be required if you reside within 50 miles of a Genworth | CareScout office with working hours targeting our core business hours of 9am-5pm EST. For applicants outside of the 50-mile radius there would be an expectation of travel, approximately 25%.\nYOUR ROLE\nAs Lead, Security Operations at Genworth | CareScout, you will lead our Computer Security Incident Response Team (CSIRT) and coordinate broader cybersecurity incident response efforts across the enterprise. You will guide the team’s preparation and response-from planning, intelligence, and detection engineering to investigation and containment through recovery and lessons learned-to protect our information, minimize business disruption, and strengthen operational resilience.\nThis role combines technical leadership with hands-on operational accountability. You will develop team capabilities, strengthen response plans and playbooks, and bring clear ownership, timely escalation, and effective communication to complex incidents. Partnering across Technology, business functions, and external providers, you will turn incident insights into practical improvements that keep our response capabilities aligned with evolving threats and business needs.\nWhat you will be doing\nLead the Computer Security Incident Response Team (CSIRT), setting priorities, developing team capabilities, and establishing clear accountability for incident readiness and response.\n Direct cybersecurity incident response from initial triage and investigation through containment, eradication, recovery, and post-incident review.\n Coordinate broader incident response efforts across Cybersecurity, Technology, business teams, and external partners, ensuring clear ownership, timely escalation, and effective handoffs.\nMaintain and enhance incident response plans, playbooks, severity criteria, and escalation procedures to support consistent execution.\nServe as a primary escalation point for significant cybersecurity incidents, translating technical findings into clear business impacts, response options, and leadership updates.\nPartner with Legal, Privacy, Compliance, Risk, Communications, and Business Continuity teams to support incident decisions, notification assessments, and recovery coordination\nGuide incident investigations, including evidence preservation, forensic analysis, and documentation, engaging specialized internal resources and external providers as needed.\nLead tabletop exercises and response simulations to test readiness, clarify responsibilities, and address gaps before incidents occur.\nUse incident trends, threat intelligence, and lessons learned to strengthen detection and response capabilities, improve playbooks, and reduce recurring issues.\nEstablish response metrics and reporting, oversee incident response service providers, and drive improvements in response speed, quality, and operational resilience.\nLeverage AI and automation to identify and respond to cybersecurity threats at machine speed\nWhat you bring\nBachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or 7+ years of equivalent relevant experience.\nSignificant progressive experience in cybersecurity operations and incident response, including leadership of a CSIRT or comparable response function.\nDemonstrated experience directing complex cybersecurity incidents and coordinating response across technical teams, business stakeholders, and external partners.\nStrong technical knowledge of incident investigation, containment, eradication, and recovery across endpoint, network, identity, and cloud environments.\nExperience with security monitoring and investigation technologies, including security information and event management (SIEM), endpoint detection and response (EDR), and security orchestration and automation tools.\nWorking knowledge of digital forensics, evidence handling, threat intelligence, and attacker tactics, techniques, and procedures.\nExperience developing incident response plans, playbooks, escalation frameworks, readiness exercises, and performance measures.\nAbility to lead and develop technical professionals, establish operational discipline, and maintain clear accountability during high-pressure situations.\nStrong judgment and communication skills, with the ability to explain technical issues, business impacts, and response decisions to senior leaders and nontechnical audiences.\nExperience in a regulated environment, preferably financial services or insurance, including partnership with Legal, Privacy, Risk, and Compliance on incident-related requirements.\nAbility to support incident escalations outside normal business hours.\nRelevant certifications such as CISSP, GCIH, GCFA, or comparable incident response credentials preferred. \nCOMPENSATION\nNational Range: $120,900 - $187,000.\nDisclaimer: This role is aligned to a national market-based pay range. Actual compensation will vary based on geographic location, experience, skills, and other job-related factors. In addition to base salary, this role is eligible to participate in a bonus incentive plan. Incentive compensation is based on individual and company performance and is not guaranteed.\nADDITIONAL\nThis role is not eligible for employment visa sponsorship.\nEmployee Benefits & Well-Being\nGenworth|CareScout employees make a difference in people’s lives every day. We’re committed to making a difference in our employees’ lives.\nCompetitive Compensation & Total Rewards Incentives\nComprehensive Healthcare Coverage\nMultiple 401(k) Savings Plan Options\nAuto Enrollment in Employer-Directed Retirement Account Feature (100% employer-funded!)\nGenerous Paid Time Off - Including 12 Paid Holidays, Volunteer Time Off and Paid Family Leave \nDisability, Life, and Long Term Care Insurance \nTuition Reimbursement, Student Loan Repayment and Training & Certification Support \nWellness support including gym membership reimbursement and Employee Assistance Program resources (work/life support, financial & legal management)\nCaregiver and Mental Health Support Services","description_format":"text","description_chars":7654,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Gym membership","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Virginia","iso":null,"kind":"city"},{"name":"Maryland","iso":null,"kind":"city"},{"name":"North Carolina","iso":null,"kind":"city"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Health Insurance & Benefits","Life Insurance & Annuities"],"lifecycle":[{"event":"open","at":"2026-10-29T08:13:06Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":51,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-11-01T06:10:25Z"},"pay":{"stated_usd_annual":187000,"is_top_pay":false},"html_url":"https://alion.io/job/genworth-financial-lead-security-operations","json_url":"https://alion.io/job/genworth-financial-lead-security-operations.json","meta":{"generated_at":"2026-11-02T04:41:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6748,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":184323},"rest":"https://alion.io/mcp/rest/get_company?id=184323"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgenworth-financial-lead-security-operations"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgenworth-financial-lead-security-operations"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgenworth-financial-lead-security-operations"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/genworth-financial-lead-security-operations\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgenworth-financial-lead-security-operations"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3445943}},{"tool":"search_jobs","arguments":{"company":"genworth.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3445943},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}