[Hiring] Global IT Security Operations & Exposure Management Lead @Barnes

Role Description

The IT Global Security Operations & Exposure Management Lead is a hands-on operational leader responsible for building and running a scalable global security operations capability. Reporting to the CISO, this role owns the effectiveness of security monitoring, incident response, security ticket operations, detection engineering, third-party security service delivery, and the operating cadence that drives exposure to closure.

• Lead and develop internal staff as the function grows.
• Partner closely with IT, engineering, manufacturing, and business service owners.
• Strengthen protection of intellectual property, manufacturing uptime, and digital modernization across legacy, cloud, and operational environments.

Qualifications

• 7+ years of progressive information security experience, including substantial hands-on experience in security operations, incident response, detection engineering, or exposure management.
• Demonstrated experience leading a SOC, MDR/MSSP service, incident response function, or comparable global security operations capability.
• Strong applied AI acumen, with the ability to effectively evaluate and leverage generative AI, security platform AI capabilities, and automation to improve security operations.
• Experience managing and developing analysts/engineers is preferred; ability to build an operating model and lead through influence is essential.
• Strong practical experience with SIEM, EDR/XDR, SOAR or case management, vulnerability management workflows, IAM telemetry, cloud logging, and incident response processes.
• Experience supporting defense, aerospace, manufacturing, or similar complex hybrid environments preferred.
• Familiarity with OT/industrial security concepts and the operational constraints of production environments preferred.
• Exceptional communication skills with the ability to translate technical risk to the business.
• CISSP, CISM, CCSP, OSCP, or related GIAC certification preferred.

Requirements

• Own daily security operations service delivery, including security ticket intake, triage, prioritization, escalation, case quality, and closure discipline.
• Manage the performance of managed security service providers and other third-party security services.
• Establish and maintain severity definitions, investigation standards, escalation paths, response playbooks, and executive notification criteria.
• Report operational health and risk to the CISO using clear measures of coverage, detection quality, response performance, backlog, and remediation progress.
• Build the operating model and talent roadmap for a scalable global security operations function.
• Promote a supportive, performance-oriented culture of velocity, integrity, and teamwork.
• Lead enterprise-wide security operations and incident response.
• Own incident lifecycle discipline: case documentation, evidence preservation, lessons learned, corrective actions, and closure validation.
• Lead incident tabletop exercises and coordinate security participation in recovery readiness.
• Establish the operational cadence that converts vulnerability, asset, identity, cloud, and threat findings into prioritized remediation actions.
• Track remediation commitments, challenge overdue high-risk items, and escalate unresolved exposure to the appropriate leaders.
• Define and continuously improve detection use cases based on threats, business-critical services, and available telemetry.
• Leverage approved AI-enabled capabilities and automation to improve detection quality.
• Translate threat intelligence relevant to aerospace IP, supplier ecosystems, and manufacturing environments into prioritized detections, hunts, response playbooks, and countermeasures.

Company Description