Director, Cybersecurity Operations
Listed on 2026-09-01
-
IT/Tech
Cybersecurity, Security Management & Operations
About Onsemi
onsemi (Nasdaq: ON) is a global leader in intelligent power and sensing technologies, driving disruptive innovations in automotive, industrial, and cloud markets. With global fab operations, design centers, and a worldwide supply chain, onsemi operates a converged IT and operational technology (OT) environment subject to rigorous regulatory and customer security obligations. The Security Operations function protects onsemi’s intellectual property, manufacturing continuity, and customer trust against a rapidly evolving threat landscape — including the emergence of frontier AI-enabled adversaries.
Job DescriptionJob Summary
About Onsemi onsemi (Nasdaq: ON) is a global leader in intelligent power and sensing technologies, driving disruptive innovations in automotive, industrial, and cloud markets. With global fab operations, design centers, and a worldwide supply chain, onsemi operates a converged IT and operational technology (OT) environment subject to rigorous regulatory and customer security obligations. The Security Operations function protects onsemi’s intellectual property, manufacturing continuity, and customer trust against a rapidly evolving threat landscape — including the emergence of frontier AI-enabled adversaries.
Position Summary
The Director, Security Operations is a senior leadership role within the Office of the CISO, accountable for the strategy, design, and 24x7x365 execution of onsemi’s global security operations across both IT and OT domains. This leader owns the Security Operations Center (SOC), threat detection and response, threat intelligence, vulnerability management, and the operational technology security program protecting global enterprise and manufacturing environments.
The Director will modernize detection and response through automation, agentic AI-enabled Sec Ops, and a measurable, risk-driven operating model. They will be a hands-on leader who balances strategic program ownership with operational rigor, manages managed security service provider (MSSP) relationships, and serves as a primary incident commander during high-severity events.
- Define and execute the global security operations strategy and roadmap across converged IT and OT environments, aligned to onsemi’s business and manufacturing priorities.
- Build, lead, and develop a high-performing global SOC team and pod-based operating model spanning detection engineering, incident response, threat intelligence, and OT security.
- Establish and report security operations metrics, KPIs, and maturity (e.g., MTTD/MTTR, coverage, detection efficacy) to the CISO and executive leadership.
- Own the MSSP and managed detection and response (MDR) relationships, including contract strategy, performance governance, and the build-versus-buy roadmap for SOC capabilities.
- Direct 24x7x365 monitoring, triage, investigation, and response across endpoint, network, cloud, identity, AI runtime, and OT telemetry.
- Serve as senior incident commander for P1/P2 incidents, coordinating cross-functional response, executive communication, and post-incident review.
- Mature the detection engineering function, threat hunting, and purple-team practices to continuously improve coverage against MITRE ATT&CK and I CSC/OT threat models.
- Lead the vulnerability management and threat intelligence programs, prioritizing remediation based on exploitability and business risk.
- Extend security operations visibility and response into manufacturing OT environments, partnering with manufacturing and engineering teams to protect production continuity.
- Champion IT/OT convergence with security models that respect the availability, safety, and uptime requirements of industrial control systems.
- Drive adoption of automation, SOAR, and agentic AI Sec Ops platforms to scale detection and response while improving analyst efficiency and reducing alert fatigue.
- Anticipate and defend against frontier AI-enabled threats, embedding AI-aware detection and response into the operating model.
- Ensure…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).