Cybersecurity Operations Leader - Hybrid, MSSP & OT

Ford Energy; Dearborn (MI); Hybrid; USD 116,000 - 218,000; Full time

Benefits offered by this job

Medical benefits

Parental leave

Vehicle discount

Tuition assistance

Paid time off

Holidays

Job summary

Ford Energy is seeking a Cybersecurity Operations Manager to lead and modernize our global security monitoring and incident response capabilities. The role oversees a hybrid team including internal staff and an MSSP, covering Enterprise IT, product security, customer apps, and Manufacturing/OT.

You will drive SIEM/SOAR optimization, lead incident responses, and ensure regulatory alignment. Senior leadership will rely on you for security metrics and cross-domain coordination.

Qualifications

• Minimum 5–7 years in Security Operations, Threat Intelligence, or Incident Response.
• 3+ years in supervisory or technical lead roles.
• Experience managing vendor/MSSP contracts and SLAs.
• Knowledge across enterprise IT, cloud, product/security platforms, and OT/ICS.
• Familiarity with ISO 27001, NIST SP 800-82, IEC 62443 frameworks.
• Incident Commander experience during major breaches or outages.

Responsibilities

• Lead 24/7 security monitoring, triage, and incident response across multiple domains.
• Oversee MSSP partnerships, SLAs, and performance metrics.
• Drive SIEM/SOAR optimization, playbooks, and automated responses.
• Direct incident leadership, containment, and customer communications.
• Collaborate with manufacturing/OT teams for real-time visibility.
• Develop security metrics and present to executives.

Skills

SOC leadership

MSSP management

Incident command

Hybrid leadership

Threat monitoring

App security monitoring

Cross-domain IT/OT

Education

Bachelor’s or Master’s degree in Cybersecurity/CS/IT/Engineering

Tools

Microsoft Sentinel

Defender XDR

Palo Alto Networks

Web application firewall

API security

Dragos

Claroty

Nozomi

Job description

Ford Energy is seeking a Cybersecurity Operations Manager to lead and modernize our global security monitoring and incident response capabilities. The role oversees a hybrid team including internal staff and an MSSP, covering Enterprise IT, product security, customer apps, and Manufacturing/OT.

You will drive SIEM/SOAR optimization, lead incident responses, and ensure regulatory alignment. Senior leadership will rely on you for security metrics and cross-domain coordination.