Principal Cybersecurity Asset Intelligence

Cummins•Columbus, IN

About The Position

Leads the organization’s cybersecurity operations, with a primary focus on incident response, threat monitoring, and executing cybersecurity strategies, policies, and risk management practices to safeguard systems, data, and infrastructure. Serves as an accountable leader for the people, processes, and technologies that prevent, detect, investigate, and contain cyber threats across enterprise, cloud, and OT environments. Owns SecOps outcomes, including 24×7 monitoring and incident response, the detection engineering program, including use-case lifecycle, signal quality, and automation, and the threat hunting program. The role coaches and mentors security professionals, develops operational processes aligned with best practices and industry standards, and partners with engineering, IT, and business teams to protect critical systems, infrastructure, and data from evolving threats. It also contributes to organizational situational awareness by managing and leveraging cybersecurity data sources.

Requirements

College, university, or equivalent degree in Computer Science, Information Technology, Engineering, or a related subject, or relevant equivalent experience.
Understanding of the capabilities and configuration of industrial cybersecurity controls and solutions across areas such as asset management, vulnerability management, anomaly detection, identity and access management, network security, endpoint security, application security, IDS/IPS, deep packet inspection, SIEM, data analytics, security or risk management, and product development.
Demonstrated ability to lead teams, manage budgets, and build organizational capability.
Excellent communication and stakeholder management skills, with the ability to influence policy and advocate for cybersecurity best practices.
Proven experience in cybersecurity management or an equivalent leadership role.
This position may require licensing for compliance with export controls or sanctions regulations.

Nice To Haves

GIAC Security Essentials Certification (GSEC).
GIAC Security Leadership Certification.
ISACA Certified Information Security Manager (CISM).
Microsoft Certified Systems Engineer: Security.
Certified Information Systems Security Professional (CISSP).

Responsibilities

Lead complex computer security incident responses in alignment with organizational policies and industry best practices.
Coordinate and communicate with business units during incidents, providing updates and actionable recommendations.
Oversee root cause analysis and integrate lessons learned into improved processes and protections.
Lead teams in assessing incident severity, developing mitigation strategies, and prioritizing risk reduction activities.
Monitor security intelligence sources, such as SANS and BugTraq, to maintain awareness of current attacks and trends.
Collaborate with Cybersecurity Engineering teams and business stakeholders to communicate risks and recommend security enhancements.
Ensure security technologies used by operations and incident response teams support and enhance operational processes.
Identify opportunities to improve operational efficiency, standard operating procedures, and incident response playbooks.
Lead application of cybersecurity and IT frameworks, such as NIST, ISO, ITIL, and COBIT, in alignment with organizational processes and controls.
Manage, coach, and mentor cybersecurity operations staff, fostering learning, accountability, and continuous improvement.
Define team objectives, evaluate performance, and support professional growth through training and development.
Participate in industry task forces and working groups to stay informed about evolving threats and best practices.
Manage and leverage cybersecurity data sources to contribute to organizational situational awareness.
Lead and develop teams, manage budgets, and build organizational capability.
Own SecOps outcomes, including 24×7 monitoring and incident response, detection engineering, and threat hunting.