Cyber Security Team Lead

Cyber Security-Team Lead -BF-24hidden_mobile4-2-JR182225 Position Title: Cyber Security-Team Lead -BF-24hidden_mobile4-2-JR182225 Job Family: IFT > Engineering/Dev Shift: Job Description: ABOUT ELEVANCE HEALTH Elevance Health is a leading health company in America dedicated to improving lives and communities and making healthcare simpler. It is the largest managed health care company in the Blue Cross Blue Shield (BCBS) Association serving more than 46 million lives across 14 states. A regular in the Fortune 500 list, Elevance ranked 20 in 2025. Gail Boudreaux , President and CEO of Elevance has been a consistent name in the Fortune list of most powerful women and currently holds 53rd rank on this list. ABOUT CARELON Carelon Global Solutions (CGS) is a healthcare solutions company that is simplifying complex operational processes to improve the health of the healthcare system. Previously known as Legato Health Technologies, Carelon Global Solutions (hereinafter, CGS) underwent a name change and joined the Carelon family of brands in January 2023, as a fully owned subsidiary of Elevance Health (Previously Anthem Inc.). CGS brings together a global team of like-minded innovators who manage and optimize operational processes for health plans as well as providers. Our brightest minds housed across our global headquarters in Indianapolis as well as Bengaluru, Hyderabad and Gurugram in India, Manila in the Philippines, Limerick in Ireland and San Juan in Puerto Rico bring with them innovative capabilities and an unmatched depth of experience. This global team uniquely positions CGS to enable scalable, next-generation platforms and specialized digital tools that make healthcare operations more practical, effective and efficient. OUR MISSION & VALUES Our Mission: Improving Lives and Communities. Simplifying Healthcare. Expecting More. Our Values: Leadership | Community | Integrity | Agility | Diversity JOB POSITION JOB RESPONSIBILITY This role is for Cyber Security Threat Management, investigating escalated (tier 2) security incidents, driving process improvement by making recommendations for automation changes and detection logic tuning, remediating vulnerability findings discovered in threat hunts, and other responsibilities necessary to support the CSTM/CSOC. This is a people manager and technical expert role responsible for a team of analysts and engineers. QUALIFICATION This position requires a BS/BA degree in Cyber Security, Information Technology, Computer Science or a similar major and at least 5 years of proven experience in investigating and remediating Cyber Security Incidents; or any combination of education and experience, which would provide an equivalent background. Effective communication skills supporting the ability to communicate highly technical details in laymans terms are required. Proven experience that demonstrates the ability to understand and investigate complex cyber security incidents. EXPERIENCE Min 5 years of experience in investigating security incidents such as malicious software, phishing emails, and malicious websites using EDR tools, host-based analysis, data platforms such as Splunk, and network or email security tools. In depth understanding of the MITRE ATT&CK framework and experience applying the framework to active investigations to enrich findings. Proven experience investigating and mitigating threats from known threat actor groups or known malicious software and the ability to identify them in high-stress environments. Proven experience filling a leadership role in a Security Operations Center environment with strong communication skills. Proven experience leading incident response teams during critical incidents and in high-stress environments. SKILLS AND COMPETENCIES Primary Skills - MITRE ATT&CK framework, EDR tools, Splunk & Network/Email Security tools. Investigating (tier 2) security and behavioral based incidents. Managing security analysts & engineers in various duties including but not limited to triaging and investigating security and behavioral based alerts, monitoring security tool health, maintaining security posture by enforcing security policies, and responding to inquiries and security related escalations. Ensuring high quality output by reviewing tier 1 analyst work, providing feedback and coaching team members towards a high level of performance. Scheduling shift work to provide coverage for overnight, weekend, and holiday shifts. Writing performance reviews, conducting new-hire interviews, providing job training, and other duties necessary to ensure staff growth and development. Assisting with security incident escalations from the Cyber Security Incident Response Team and Threat Hunting Team. Monitoring security tool health and responding to outages. Assisting with tuning of detection logic and automation to improve security posture. Developing response actions and playbooks for established use cases. THE CARELON PROMISE Aligning with our brand belief of Cyber