Global IT Security Operations Lead – Exposure Management
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Global security operations leader building incident response, detection, and exposure management capabilities. Protecting aerospace intellectual property, manufacturing uptime, and hybrid IT environments.
Responsibilities:
- Build and run a scalable global security operations capability
- Own daily security operations service delivery, including ticket intake, triage, prioritization, escalation, case quality, and closure
- Manage managed security service providers and other third-party security services
- Establish severity definitions, investigation standards, escalation paths, response playbooks, and executive notification criteria
- Report operational health and risk to the CISO using coverage, detection quality, response, backlog, and remediation measures
- Build the operating model and talent roadmap for a scalable global security operations function
- Lead enterprise-wide security operations and incident response, including detection, triage, containment coordination, eradication support, root-cause analysis, and post-incident review
- Own incident documentation, evidence preservation, lessons learned, corrective actions, and closure validation
- Lead incident tabletop exercises and coordinate security participation in recovery readiness
- Partner with IT, engineering, manufacturing, and business service owners on timely remediation
- Establish the cadence for converting vulnerability, asset, identity, cloud, and threat findings into prioritized remediation actions
- Track remediation commitments, challenge overdue high-risk items, and escalate unresolved exposure
- Ensure security monitoring and response requirements are incorporated into major initiatives
- Define telemetry standards, coverage models, automation pipelines, and detection use cases
- Improve detection fidelity through tuning, enrichment, automation, and lifecycle management
- Leverage approved AI capabilities and automation to improve detection, investigation, response, documentation, and security operations maturity
- Define monitoring and logging requirements and close coverage gaps
- Translate threat intelligence into detections, hunts, response playbooks, and countermeasures
- Collaborate with vulnerability management, risk, and red teams to reduce attack surface
- Understand and respond to IOCs, TTPs, ransomware, and supply-chain threats
- Report to the CISO and lead and develop internal staff as the function grows
Requirements:
- 7+ years of progressive information security experience, including substantial hands-on experience in security operations, incident response, detection engineering, or exposure management
- Demonstrated experience leading a SOC, MDR/MSSP service, incident response function, or comparable global security operations capability
- Strong applied AI acumen, including evaluating and leveraging generative AI, security platform AI capabilities, and automation
- Experience managing and developing analysts/engineers is preferred
- Ability to build an operating model and lead through influence
- Strong practical experience with SIEM, EDR/XDR, SOAR or case management, vulnerability management workflows, IAM telemetry, cloud logging, and incident response processes
- Familiarity with OT/industrial security concepts and production-environment constraints is preferred
- Experience supporting defense, aerospace, manufacturing, or similar complex hybrid environments is preferred
- Exceptional communication skills and ability to translate technical risk to the business
- CISSP, CISM, CCSP, OSCP, or related GIAC certification is preferred
- Bachelor's degree from an accredited college/university or equivalent experience
- If applicable, must satisfy U.S. export-control requirements, including documentation needed to assess U.S. Person status or obtain an export license
Benefits:
- Remote work arrangement
- Equal employment opportunity protections for protected veterans and individuals with disabilities
- Reasonable accommodation for applicants with disabilities
Similar Jobs
SOC Analyst
SOC Analyst monitoring security alerts and resolving incidents for Leadtech’s global digital products. Improving vulnerability management and security processes across cross-functional teams.
Security Operations Associate
Security Operations Associate supporting Everbridge’s critical event management technology. Coordinating secure journey services, security assistance, vendors, client communications, and operational records.
Security Incident Response Manager – Abuse Operations
Stripe Security Incident Response Manager investigating fraud and abuse across its financial infrastructure platform. Leading incident response, mitigation, automation, and cross-functional security improvements.
Senior SOC Analyst
Senior SOC Analyst investigating and resolving OT security incidents for ABB’s industrial technology solutions. Performing forensic analysis, improving threat detection, and automating SOC processes.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer bei Axians Schweiz für Microsoft Cloud- und Managed-Security-Umgebungen. Implementierung, Betrieb und Weiterentwicklung von Managed Security Services sowie Analyse von Cyberbedrohungen.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer operating managed security services for Axians Switzerland’s Microsoft cloud and IT environments. Analyzing cyberthreats and implementing security projects.
Security Engineer III – Security Operations
Security Engineer detecting, investigating, and responding to threats across Primer's global payments infrastructure. Building Elastic, AWS, Python, and Terraform security operations automation.
Director of Security Operations
Director of Security Operations leading Backblaze’s cybersecurity monitoring, incident response, and vulnerability programs. Driving AI-assisted defenses, automation, and operational resilience across cloud and distributed environments.
Security Engineer – SOC
Security Engineer developing SOC detection systems for APT-ONE, a Berlin cybersecurity consultancy. Building SIEM/XDR platforms, detection-as-code pipelines, and AI-assisted security workflows.
HR Operations Analyst – Security & Apps
HR operations security analyst optimizing NBCUniversal’s global HR applications and access systems. Managing security access, audits, application releases, and HR technology improvements.
Security Operations Analyst
Security Operations Analyst defending Unqork’s AI-powered enterprise application platform. Monitoring threats, engineering SIEM/SOAR detections, and supporting incident response and compliance.
Tier 2 SOC Analyst
Tier 2 SOC Analyst investigating and containing escalated SIEM and EDR threats for federal and Fortune 100 clients. Developing runbooks, managing vulnerabilities, and meeting overnight incident-response SLAs.
Tier 1 SOC Analyst
Tier 1 SOC Analyst monitoring SIEM and EDR alerts for Dragonfli Group’s federal and Fortune 100 cybersecurity clients. Triaging incidents, tracking vulnerabilities, and escalating overnight events.
Associate SOC Analyst
Associate SOC Analyst protecting Expel customers through managed detection and response. Investigating alerts, hunting threats, and responding across endpoint and cloud environments.
Director of Security Operations
Aledade, a value-based primary-care network, seeking a remote Director of Security Operations in the United States. Leading SOC operations, incident response, threat intelligence, vulnerability management, and security teams.
Senior GRC Analyst, SOC 2
Senior GRC Auditor I ensuring client satisfaction through effective IT controls and compliance audits. Develops client relationships while leading external audits to meet industry standards.
Security Operations Engineer – Incident Response
Security Operations Engineer leading incident response and forensic investigations at ProCircular. Managing critical security incidents and developing detection methodologies in a SOC environment.
Security Operations Engineer
Security Operations Engineer managing security operations and compliance for AI functions in higher education. Ensuring data protection and security in cloud environments and IT operations.
Senior Security Engineer, Incident Response
Senior Security Engineer leading the technical response to incidents and enhancing security processes for Twilio. Working across R&D Engineering and Business teams on security challenges and incident management.
SecOps Transformation Advisor
SecOps Transformation Advisor driving XSIAM revenue and consultative sales strategy for cybersecurity solutions. Engaging executive relationships and providing business value through tailored proposals.