Cybersecurity Operations Manager, Ford Energy

Ford Motor Company • Dearborn, MI

9h • $115,500 - $218,100 • Hybrid

About The Position

Ford Energy is seeking a Cybersecurity Operations Manager to lead, operationalize, and modernize global security monitoring and incident response capabilities. The role oversees a hybrid operating model involving internal direct reports and a managed security service provider (MSSP), with responsibility spanning Enterprise IT, Product Cybersecurity, customer-facing applications and connected platforms, and Manufacturing/Operational Technology (OT) environments.

The manager leads security monitoring, incident triage and response; directs internal and external operational teams; and improves SIEM/SOAR platforms, detections, threat-hunting playbooks, and automated response workflows. The role serves as the primary escalation lead and incident commander for complex cybersecurity events, and works with plant operations and ICS engineers to maintain visibility and response capabilities across manufacturing sites. It also supports compliance and audit readiness, reports operational metrics and security posture to executives and business stakeholders, and manages on-call escalation rotations for critical incidents.

The position is based in Dearborn, Michigan, with a hybrid schedule requiring onsite work four or more days per week. It is leadership level 6, with a salary range of $115,500–$218,100. The role will initially be employed by Ford Motor Company and is expected to transition to its wholly owned Battery Energy Storage Systems subsidiary within one year.

Requirements

• At least 5–7 years of experience in Security Operations (SOC), Threat Intelligence, or Incident Response.
• At least 3 years in a supervisory, management, or technical lead role.
• Demonstrated success managing vendor or MSSP contracts, service delivery SLAs, and combined internal and external teams.
• Hands-on leadership experience operating security operations across enterprise IT, cloud infrastructure, customer-facing applications or platforms, and OT/ICS.
• Working knowledge of application security monitoring, web/API threat detection, and securing customer-facing digital platforms and portals.
• Understanding of ISO 27001, NIST SP 800-82, IEC 62443, or similar frameworks relevant to connected products and critical infrastructure.
• Strong experience acting as an Incident Commander during major breach responses, cyberattacks, or critical infrastructure outages.
• Bachelor's or master's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical field, or equivalent related work experience.
• Legally authorized to work in the United States; employment eligibility verification is required at hire.

Nice To Haves

• Certifications such as CISSP, CISM, GCIH, GCFA, GRID, or GICSP.
• Experience securing customer-facing SaaS platforms, IoT/connected product ecosystems, or remote monitoring applications in electric utility, automotive (EV/BMS), or advanced manufacturing sectors.
• Technical familiarity with Microsoft Sentinel, Defender XDR, Palo Alto Networks, web application firewalls, API security tools, and OT monitoring solutions such as Dragos, Claroty, or Nozomi.
• Experience partnering with product and customer experience teams to embed security monitoring into customer-facing application development and support lifecycles.
• Ability to communicate technical incident details, business risks, and remediation strategies clearly to C-level executives and customer-facing stakeholders.
• Decisive, strategic leadership capable of unifying IT, OT, Product, and customer-facing application operations into a proactive defense posture.

Responsibilities

• Direct, mentor, and manage the security operations team, and oversee MSSP performance, service-level agreements, escalation pathways, and daily operations.
• Lead 24/7 monitoring, incident triage, and response across Enterprise IT, cloud platforms, Product/IoT telemetry, customer-facing portals and applications, and Manufacturing/OT facilities.
• Own threat detection, security monitoring, and incident response for customer-facing applications, portals, APIs, authentication systems, and customer data pathways.
• Lead threat monitoring and security telemetry analysis for external-facing platforms and connected infrastructure linking customer environments to Ford Energy cloud and support systems.
• Optimize SIEM/SOAR platforms, detection rules, threat-hunting playbooks, and automated response workflows to reduce MTTD and MTTR.
• Serve as the primary escalation lead and incident commander during complex cybersecurity incidents, leading containment, eradication, root-cause analysis, and customer communications.
• Collaborate with plant operations and ICS engineers to ensure visibility, anomaly detection, and incident handling across manufacturing plants.
• Support operational security logging, audit readiness, and incident response procedures aligned with applicable security frameworks and critical infrastructure requirements.
• Develop, track, and present operational security metrics, threat landscapes, customer application security posture, and SOC effectiveness KPIs to executives and business stakeholders.
• Serve as the senior operational contact and manage on-call escalation rotations for critical security incidents, including those affecting customer-facing platforms.

Benefits

• Immediate medical, dental, vision, and prescription drug coverage.
• Flexible family care days, paid parental leave, new parent ramp-up programs, and subsidized backup childcare.
• Family-building benefits, including adoption and surrogacy expense reimbursement and fertility treatments.
• Vehicle discount program for employees and family members, and management leases.
• Tuition assistance.
• Employee resource groups.
• Paid time off for individual and team community service.
• Paid holidays, including the week between Christmas and New Year's Day.
• Paid time off and the option to purchase additional vacation time.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager