Manager, IT Security Engineering, Ford Energy

We are seeking a Manager IT Security Engineering with strong SOC experience to implement, operate, and optimize enterprise security platforms across cloud, identity, endpoint, network, and vulnerability management domains. This role supports immediate security initiatives and serves as an L3 escalation point within a rotating on-call model.

We made history and now we work to transform the future - for our customers, our communities and our families. You'll see your work on the road every day, helping people move freely and pursue their dreams. At Ford, you can build more than vehicles. Come build what matters. Ford Energy is a newly formed, wholly-owned subsidiary of Ford Motor Company dedicated to accelerating U.S. energy independence.

Leveraging Ford's century of manufacturing excellence and world-class battery energy storage systems (BESS) technology, Ford Energy designs, manufactures, and services grid-scale and commercial DC battery energy storage systems (BESS). Ford Energy is uniquely positioned to capture the growing demand for reliable, US-built energy storage systems. We are not just building batteries; we are building the infrastructure for the next generation of the American grid.

What you'll do...

Key Responsibilities

* Platform Management:
Implement, configure, upgrade, document, and troubleshoot security platforms, including:
Microsoft Sentinel (SIEM/SOAR), Microsoft Defender (XDR/DLP), Microsoft Purview, Entra , and Microsoft 365 Security, Tenable (including Cloud TVM), Tanium, Delinea (PAM), Git Hub Security, Google Security Command Center (SCC), and Palo Alto Firewalls.

* SIEM & Logging:
Lead enterprise-wide logging implementation and SIEM data onboarding.

* Vulnerability Management:
Implement vulnerability and cloud TVM solutions and integrate with asset/CMDB data.

* Operational Excellence:
Develop cyber security health monitoring and detection quality improvements.

* Network Security:
Perform firewall rule reviews, cleanup, and tightening.

* Incident Response:
Act as L3 SOC support for advanced investigations and incident response.

* Collaboration:

Partner with IT and infrastructure teams; participate in change control processes.

* Innovation:
Apply AI-assisted approaches to investigation and security operations.

* Availability:
Participate in a rotating L3 off-hours on-call schedule.

What you'll do...

Key Responsibilities

* Platform Management:
Implement, configure, upgrade, document, and troubleshoot security platforms, including:
Microsoft Sentinel (SIEM/SOAR), Microsoft Defender (XDR/DLP), Microsoft Purview, Entra , and Microsoft 365 Security, Tenable (including Cloud TVM), Tanium, Delinea (PAM), Git Hub Security, Google Security Command Center (SCC), and Palo Alto Firewalls.

* SIEM & Logging:
Lead enterprise-wide logging implementation and SIEM data onboarding.

* Vulnerability Management:
Implement vulnerability and cloud TVM solutions and integrate with asset/CMDB data.

* Operational Excellence:
Develop cyber security health monitoring and detection quality improvements.

* Network Security:
Perform firewall rule reviews, cleanup, and tightening.

* Incident Response:
Act as L3 SOC support for advanced investigations and incident response.

* Collaboration:

Partner with IT and infrastructure teams; participate in change control processes.

* Innovation:
Apply AI-assisted approaches to investigation and security operations.

* Availability:
Participate in a rotating L3 off-hours on-call schedule.