Global IT Security Operations Lead – Exposure Management

🔥 29 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🛡️ Security Operations

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Barnes Aerospace

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🏭 Manufacturing

📦 Logistics

🚀 Aerospace

Manufacturing • Logistics • Aerospace

Barnes Aerospace is a global manufacturer and maintenance provider specializing in precision-machined and fabricated components and complex assemblies for aeroengines, airframes, and nacelles. The company also operates certified MRO repair stations (FAA, EASA and other authorities) offering component repair, overhaul, and modification services, and emphasizes strict compliance with industry standards (ISO, AS, Nadcap). With global facilities across the US, UK, Poland, Taiwan, and Singapore, Barnes serves commercial aviation, defense, industrial, and space customers and partners with OEMs on long-term manufacturing and aftermarket contracts.

📋 Description

• Build and run a scalable global security operations capability • Own daily security operations service delivery, including ticket intake, triage, prioritization, escalation, case quality, and closure • Manage managed security service providers and other third-party security services • Establish severity definitions, investigation standards, escalation paths, response playbooks, and executive notification criteria • Report operational health and risk to the CISO using coverage, detection quality, response, backlog, and remediation measures • Build the operating model and talent roadmap for a scalable global security operations function • Lead enterprise-wide security operations and incident response, including detection, triage, containment coordination, eradication support, root-cause analysis, and post-incident review • Own incident documentation, evidence preservation, lessons learned, corrective actions, and closure validation • Lead incident tabletop exercises and coordinate security participation in recovery readiness • Partner with IT, engineering, manufacturing, and business service owners on timely remediation • Establish the cadence for converting vulnerability, asset, identity, cloud, and threat findings into prioritized remediation actions • Track remediation commitments, challenge overdue high-risk items, and escalate unresolved exposure • Ensure security monitoring and response requirements are incorporated into major initiatives • Define telemetry standards, coverage models, automation pipelines, and detection use cases • Improve detection fidelity through tuning, enrichment, automation, and lifecycle management • Leverage approved AI capabilities and automation to improve detection, investigation, response, documentation, and security operations maturity • Define monitoring and logging requirements and close coverage gaps • Translate threat intelligence into detections, hunts, response playbooks, and countermeasures • Collaborate with vulnerability management, risk, and red teams to reduce attack surface • Understand and respond to IOCs, TTPs, ransomware, and supply-chain threats • Report to the CISO and lead and develop internal staff as the function grows

🎯 Requirements

• 7+ years of progressive information security experience, including substantial hands-on experience in security operations, incident response, detection engineering, or exposure management • Demonstrated experience leading a SOC, MDR/MSSP service, incident response function, or comparable global security operations capability • Strong applied AI acumen, including evaluating and leveraging generative AI, security platform AI capabilities, and automation • Experience managing and developing analysts/engineers is preferred • Ability to build an operating model and lead through influence • Strong practical experience with SIEM, EDR/XDR, SOAR or case management, vulnerability management workflows, IAM telemetry, cloud logging, and incident response processes • Familiarity with OT/industrial security concepts and production-environment constraints is preferred • Experience supporting defense, aerospace, manufacturing, or similar complex hybrid environments is preferred • Exceptional communication skills and ability to translate technical risk to the business • CISSP, CISM, CCSP, OSCP, or related GIAC certification is preferred • Bachelor's degree from an accredited college/university or equivalent experience • If applicable, must satisfy U.S. export-control requirements, including documentation needed to assess U.S. Person status or obtain an export license

🏖️ Benefits

• Remote work arrangement • Equal employment opportunity protections for protected veterans and individuals with disabilities • Reasonable accommodation for applicants with disabilities