Global IT Security Operations & Exposure Management Lead (Remote)

Core Responsibilities

• Security Service Delivery & Operational Governance Leadership
• Own daily security operations service delivery, including security ticket intake, triage, prioritization, escalation, case quality, and closure discipline
• Manage the performance of managed security service providers and other third-party security services, defining expectations, reviewing metrics, challenging quality, and driving corrective actions
• Establish and maintain severity definitions, investigation standards, escalation paths, response playbooks, and executive notification criteria
• Report operational health and risk to the CISO using clear measures of coverage, detection quality, response performance, backlog, and remediation progress
• Build the operating model and talent roadmap for a scalable global security operations function
• Promote a supportive, performance-oriented culture of velocity, integrity, and teamwork

Security Operations, Incident Response, and Cyber Resilience

Exposure Management & Remediation

Detection Engineering & Platform Maturity

Threat Intelligence & Countermeasures

Qualifications

• 7+ years of progressive information security experience, including substantial hands-on experience in security operations, incident response, detection engineering, or exposure management
• Demonstrated experience leading a SOC, MDR/MSSP service, incident response function, or comparable global security operations capability
• Strong applied AI acumen, with the ability to effectively evaluate and leverage generative AI, security platform AI capabilities, and automation to improve security operations, accelerate analysis and investigation, automate knowledge work, and identify high-value opportunities for AI adoption
• Experience managing and developing analysts/engineers is preferred; being able to build an operating model and lead through influence is essential
• Strong practical experience with SIEM, EDR/XDR, SOAR or case management, vulnerability management workflows, IAM telemetry, cloud logging, and incident response processes
• Experience supporting defense, aerospace, manufacturing, or similar complex hybrid environments preferred
• Familiarity with OT/industrial security concepts and the operational constraints of production environments preferred
• Exceptional communication skills with the ability to translate technical risk to the business
• CISSP, CISM, CCSP, OSCP, or related GIAC certification preferred

Education Requirements

• Bachelor's degree from an accredited college/university or equivalent experience.
• This job position may include access to controlled information or technology subject to U.S. export control laws. If an applicant does not meet the definition of a “U.S. Person” (which includes U.S. citizens, U.S. lawful permanent residents, and those granted U.S. asylum or refugee status), the Company may be required to obtain an export control license. If the position for which you applied involves access to controlled information or technology subject to U.S. export control laws, then any offer is also contingent on verification of appropriate documentation for the Company to assess whether an export license will be required to employ you in that role, and if it is determined that an export license is required, the offer is also contingent on the Company’s determination, in its sole discretion, whether a license application and ongoing administration is prudent under the project’s contract parameters and whether an export license can be successfully obtained before you can start in that role. Export license applications may take several weeks to be processed.