Cybersecurity Operations Manager

Ford Motor Company

. Direct, mentor, and manage the security operations team .

Posted 10/23/2026full-timeDearborn • Michigan • United StatesMid-LevelSenior💰 $115,500 - $218,100 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading security operations, incident response, and threat intelligence across enterprise IT and cloud environments. Proficient in managing vendor relationships, optimizing security frameworks, and ensuring compliance with industry standards.

Highest-signal resume keywords

Security Operations ManagementIncident Response LeadershipThreat Intelligence AnalysisApplication Security MonitoringVendor Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Operations Center (SOC)Incident ResponseThreat DetectionRoot-Cause AnalysisPerformance Metrics TrackingCybersecurity FrameworksApplication SecurityThreat-Hunting PlaybooksEscalation PathwaysAudit Readiness

Soft Skills

LeadershipMentoringCollaborationCommunicationProblem-Solving

Tools & Technologies

SIEMSOARMicrosoft SentinelDefender XDRPalo Alto NetworksWeb Application FirewallsAPI Security ToolsDragosClarotyNozomi

Certifications & Qualifications

CISSPCISMGCIHGCFAGRIDGICSP

Industry Keywords

ISO 27001NIST SP 800-82IEC 62443Cloud InfrastructureIoTConnected Product EcosystemsCustomer-Facing ApplicationsOperational Technology (OT)Incident CommanderCybersecurity Incidents

Tech Stack

Tools & technologies

CloudCyber SecurityFirewallsIoT

About the role

Key responsibilities & impact

Direct, mentor, and manage the security operations team
Oversee performance, SLAs, escalation pathways, and daily operations of external MSSP partners
Lead 24/7 security monitoring, incident triage, and response across enterprise IT, cloud, product/IoT, customer-facing applications, and manufacturing/OT facilities
Own monitoring, threat detection, and incident response for customer-facing applications, portals, APIs, authentication systems, and customer data pathways
Lead threat monitoring and security telemetry analysis for external-facing platforms and connected infrastructure
Optimize SIEM/SOAR platforms, detection rules, threat-hunting playbooks, and automated response workflows
Act as primary escalation lead and incident commander during complex cybersecurity incidents
Lead containment, eradication, root-cause analysis, and customer communications
Collaborate with plant operations and ICS engineers on visibility, anomaly detection, and incident handling
Support security logging, audit readiness, and incident response procedures aligned with applicable frameworks
Develop, track, and present security metrics, threat landscapes, application security posture, and SOC effectiveness KPIs to executives and stakeholders
Serve as senior operational contact and manage on-call escalation rotations

Requirements

What you’ll need

Minimum of 5–7 years of experience in Security Operations (SOC), Threat Intelligence, or Incident Response
At least 3+ years in a supervisory, management, or technical lead role
Demonstrated success managing vendor/MSSP contracts, service delivery SLAs, and combined internal and external teams
Hands-on leadership across enterprise IT, cloud infrastructure, customer-facing applications/platforms, and OT/ICS
Working knowledge of application security monitoring, web/API threat detection, and securing customer-facing platforms and portals
Understanding of ISO 27001, NIST SP 800-82, IEC 62443, or similar frameworks
Strong experience acting as Incident Commander during major breach responses, cyber-attacks, or critical infrastructure outages
Bachelor's or master's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical field, or equivalent related work experience
Visa sponsorship is not available
Must be legally authorized to work in the United States
Relevant certifications such as CISSP, CISM, GCIH, GCFA, GRID, or GICSP are advantageous
Experience with SaaS platforms, IoT/connected product ecosystems, or remote monitoring applications is advantageous
Familiarity with Microsoft Sentinel, Defender XDR, Palo Alto Networks, web application firewalls, API security tools, Dragos, Claroty, or Nozomi is advantageous

Benefits

Comp & perks

Performance-based bonuses
Ford vehicle discounts
Immediate medical, dental, vision and prescription drug coverage
Flexible family care days
Paid parental leave
New parent ramp-up programs
Subsidized back-up child care
Adoption and surrogacy expense reimbursement
Fertility treatments
Vehicle discount program for employees and family members
Management leases
Tuition assistance
Established and active employee resource groups
Paid time off for individual and team community service
Paid holidays, including the week between Christmas and New Year's Day
Paid time off
Option to purchase additional vacation time