Sr. Director of Security Operations & Engineering

Arcadia is dedicated to happier, healthier days for all. We believe that there is a better healthcare world – one powered by data. Our platform transforms complex, diverse data into a unified foundation for health, helping organizations deliver better care, boost revenue, and lower costs.

We’re a team of fiercely driven individuals committed to making healthcare more sustainable—and we’re looking for passionate people to help us get there.

For more information, visit arcadia.io.

Arcadia is seeking a Senior Director of Security Operations & Engineering to lead the company’s technical security function across infrastructure, cloud platforms, and corporate environments. This role will unify Security Operations, Cloud and Infrastructure Security, and Threat Detection into a cohesive, high-performing team that protects Arcadia’s healthcare data and SaaS platform.

This is a hands‑on technical leadership position. The successful candidate will architect, build, and operate modern security systems while leading engineers, analysts, and network specialists. They will define and drive Arcadia’s technical security roadmap, manage incident response, and implement resilient, scalable security solutions in a highly regulated healthcare SaaS environment.

• Complete all mandatory training and onboarding activities
• Gain a deep understanding of Arcadia’s infrastructure, threat landscape, and existing controls
• Establish clear objectives and technical direction for each pod (e.g., Cloud Security/Security Engineering, Network & Infrastructure Security, and Threat Detection & Response)
• Lead and participate in active incident response and threat hunting activities
• Deliver measurable improvements in detection coverage, cloud posture, and automation
• Implement engineering and process changes that reduce operational burden and MTTR
• Mentor and grow the team’s technical capabilities and leadership maturity

• Mature Arcadia’s Security Operations & Engineering program into a data‑driven, automation‑enabled function
• Demonstrate reduced risk exposure and improved audit readiness through measurable KPIs
• Be recognized across the company as the go‑to technical leader for security architecture and response

• Mature Arcadia’s Security Operations & Engineering program into a unified, metrics‑driven function with defined KPIs for detection, response, and remediation performance
• Demonstrate measurable improvement in enterprise and cloud security posture through improved coverage, reduced mean time to detect (MTTD) and mean time to respond (MTTR), and reduced audit findings
• Establish and maintain automated, auditable evidence collection processes that streamline HITRUST, ISO 27001, and SOC 2 compliance
• Deliver a robust, continuously tested incident response framework with automated containment capabilities and full integration into corporate and product operations
• Partner with Product, Infrastructure, and Engineering leadership to embed security design principles and tooling into development life cycles, driving measurable shifts toward secure‑by‑default practices
• Influence company‑wide technology and risk strategies by serving as a key advisor to executive leadership on emerging threats, security investments, and architecture decisions
• Position Arcadia as an industry leader in healthcare security by driving innovation in automation, detection, and resilience while maintaining operational excellence

• Lead and develop teams responsible for cloud security engineering, network and infrastructure security, and security operations
• Define and execute the security engineering roadmap aligned with Arcadia’s mission and regulatory and compliance obligations (e.g., HIPAA, HITRUST, ISO 27001, SOC
  2)
• Serve as the senior technical authority for all security controls, tooling, and automation initiatives
• Partner with Engineering, IT, and Compliance leadership to embed secure design principles into products and operations
• Own and evolve Arcadia’s Computer Security Incident Response Team (CSIRT), ensuring readiness, playbook maturity, and…