{"id":165137,"url":"https://alion.io/job/onsemi-director-cybersecurity-operations","title":"Director, Cybersecurity Operations","company":{"id":58717,"name":"onsemi","domain":"onsemi.com","url":"https://alion.io/company/onsemi","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":77,"open_postings":165,"ghost_share":0,"stale_share":0.903,"repost_share":0,"time_to_fill_p50_days":25,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Scottsdale, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":137000,"max_usd":293000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":155},"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Commander.js","optional":false},{"name":"GDPR","optional":false},{"name":"JavaScript","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Node JS","optional":false},{"name":"SIEM","optional":false},{"name":"ISO 27001","optional":true},{"name":"NIST CSF","optional":true}],"status":"live","first_seen_at":"2026-08-14T00:00:00Z","employer_posted_date":"2026-08-14","last_verified_at":"2026-10-18T04:21:49Z","board_verified":true,"closed_at":null,"days_open":65,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":65},"description":"Job Summary:\nAbout onsemi\nonsemi (Nasdaq: ON) is a global leader in intelligent power and sensing technologies, driving disruptive innovations in automotive, industrial, and cloud markets. With global fab operations, design centers, and a worldwide supply chain, onsemi operates a converged IT and operational technology (OT) environment subject to rigorous regulatory and customer security obligations. The Security Operations function protects onsemi’s intellectual property, manufacturing continuity, and customer trust against a rapidly evolving threat landscape - including the emergence of frontier AI-enabled adversaries.\nPosition Summary\nThe Director, Security Operations is a senior leadership role within the Office of the CISO, accountable for the strategy, design, and 24x7x365 execution of onsemi’s global security operations across both IT and OT domains. This leader owns the Security Operations Center (SOC), threat detection and response, threat intelligence, vulnerability management, and the operational technology security program protecting global enterprise and manufacturing environments.\nThe Director will modernize detection and response through automation, agentic AI-enabled SecOps, and a measurable, risk-driven operating model. They will be a hands-on leader who balances strategic program ownership with operational rigor, manages managed security service provider (MSSP) relationships, and serves as a primary incident commander during high-severity events.\nKey Responsibilities\nStrategy & Program Leadership\nDefine and execute the global security operations strategy and roadmap across converged IT and OT environments, aligned to onsemi’s business and manufacturing priorities.\nBuild, lead, and develop a high-performing global SOC team and pod-based operating model spanning detection engineering, incident response, threat intelligence, and OT security.\nEstablish and report security operations metrics, KPIs, and maturity (e.g., MTTD/MTTR, coverage, detection efficacy) to the CISO and executive leadership.\nOwn the MSSP and managed detection and response (MDR) relationships, including contract strategy, performance governance, and the build-versus-buy roadmap for SOC capabilities.\nDetection, Response & Operations\nDirect 24x7x365 monitoring, triage, investigation, and response across endpoint, network, cloud, identity, AI runtime, and OT telemetry.\nServe as senior incident commander for P1/P2 incidents, coordinating cross-functional response, executive communication, and post-incident review.\nMature the detection engineering function, threat hunting, and purple-team practices to continuously improve coverage against MITRE ATT&CK and ICS/OT threat models.\nLead the vulnerability management and threat intelligence programs, prioritizing remediation based on exploitability and business risk.\nOT & Manufacturing Security\nExtend security operations visibility and response into manufacturing OT environments, partnering with manufacturing and engineering teams to protect production continuity.\nChampion IT/OT convergence with security models that respect the availability, safety, and uptime requirements of industrial control systems.\nAI-Enabled SecOps & Automation\nDrive adoption of automation, SOAR, and agentic AI SecOps platforms to scale detection and response while improving analyst efficiency and reducing alert fatigue.\nAnticipate and defend against frontier AI-enabled threats, embedding AI-aware detection and response into the operating model.\nGovernance, Compliance & Collaboration\nEnsure security operations support onsemi’s regulatory and customer obligations, including export-control (ITAR/EAR) data handling, SOX, GDPR, and customer/industry security requirements.\nPartner with IT, Trust & Assurance, legal, privacy, and business stakeholders to align operational response with enterprise risk and incident response obligations.\nManage the security operations budget, vendor portfolio, and tooling rationalization to deliver measurable risk reduction and cost efficiency.\nRequired Qualifications\n12+ years of progressive cybersecurity experience, with 5+ years leading security operations, SOC, or incident response functions.\nDemonstrated experience building and leading distributed 24x7 SOC teams, including MSSP/MDR governance and hybrid operating models.\nDeep expertise in threat detection and response, SIEM/SOAR, EDR/XDR, threat intelligence, and modern detection engineering.\nProven incident command experience leading high-severity, business-impacting incidents end to end.\nStrong people leadership: building, scaling, and retaining technical security teams.\nBachelor’s degree in Computer Science, Information Security, or related field, or equivalent experience.\nPreferred Qualifications\nExperience securing converged IT/OT environments, ideally in semiconductor, manufacturing, or other critical-infrastructure industries.\nFamiliarity with export-control (ITAR/EAR) data residency requirements and Fortune 500 regulatory environments (SOX, GDPR).\nHands-on experience deploying automation and agentic AI SecOps platforms in production.\nIndustry certifications such as CISSP, CCSP, GCIA, GCIH, or equivalent.\nKnowledge of ISO27001, NIST CSF 2.0, MITRE ATT&CK, and ICS/OT security frameworks (e.g., IEC 62443).\nLeadership Competencies\nOperates with executive presence and communicates risk in business and quantified terms.\nBalances strategic vision with operational discipline and a bias for measurable outcomes.\nBuilds trusted partnerships across IT, OT, manufacturing, and business stakeholders.\nLeads calmly and decisively under pressure during active security incidents.\n Responsibilities:\nStrategy & Program Leadership\nDefine and execute the global security operations strategy and roadmap across converged IT and OT environments, aligned to onsemi’s business and manufacturing priorities.\nBuild, lead, and develop a high-performing global SOC team and pod-based operating model spanning detection engineering, incident response, threat intelligence, and OT security.\nEstablish and report security operations metrics, KPIs, and maturity (e.g., MTTD/MTTR, coverage, detection efficacy) to the CISO and executive leadership.\nOwn the MSSP and managed detection and response (MDR) relationships, including contract strategy, performance governance, and the build-versus-buy roadmap for SOC capabilities.\nDetection, Response & Operations\nDirect 24x7x365 monitoring, triage, investigation, and response across endpoint, network, cloud, identity, AI runtime, and OT telemetry.\nServe as senior incident commander for P1/P2 incidents, coordinating cross-functional response, executive communication, and post-incident review.\nMature the detection engineering function, threat hunting, and purple-team practices to continuously improve coverage against MITRE ATT&CK and ICS/OT threat models.\nLead the vulnerability management and threat intelligence programs, prioritizing remediation based on exploitability and business risk.\nOT & Manufacturing Security\nExtend security operations visibility and response into manufacturing OT environments, partnering with manufacturing and engineering teams to protect production continuity.\nChampion IT/OT convergence with security models that respect the availability, safety, and uptime requirements of industrial control systems.\nAI-Enabled SecOps & Automation\nDrive adoption of automation, SOAR, and agentic AI SecOps platforms to scale detection and response while improving analyst efficiency and reducing alert fatigue.\nAnticipate and defend against frontier AI-enabled threats, embedding AI-aware detection and response into the operating model.\nGovernance, Compliance & Collaboration\nEnsure security operations support onsemi’s regulatory and customer obligations, including export-control (ITAR/EAR) data handling, SOX, GDPR, and customer/industry security requirements.\nPartner with IT, Trust & Assurance, legal, privacy, and business stakeholders to align operational response with enterprise risk and incident response obligations.\nManage the security operations budget, vendor portfolio, and tooling rationalization to deliver measurable risk reduction and cost efficiency.\nRequired Qualifications\n12+ years of progressive cybersecurity experience, with 5+ years leading security operations, SOC, or incident response functions.\nDemonstrated experience building and leading distributed 24x7 SOC teams, including MSSP/MDR governance and hybrid operating models.\nDeep expertise in threat detection and response, SIEM/SOAR, EDR/XDR, threat intelligence, and modern detection engineering.\nProven incident command experience leading high-severity, business-impacting incidents end to end.\nStrong people leadership: building, scaling, and retaining technical security teams.\nBachelor’s degree in Computer Science, Information Security, or related field, or equivalent experience.\nPreferred Qualifications\nExperience securing converged IT/OT environments, ideally in semiconductor, manufacturing, or other critical-infrastructure industries.\nFamiliarity with export-control (ITAR/EAR) data residency requirements and Fortune 500 regulatory environments (SOX, GDPR).\nHands-on experience deploying automation and agentic AI SecOps platforms in production.\nIndustry certifications such as CISSP, CCSP, GCIA, GCIH, or equivalent.\nKnowledge of ISO27001, NIST CSF 2.0, MITRE ATT&CK, and ICS/OT security frameworks (e.g., IEC 62443).","description_format":"text","description_chars":9439,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":5,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Analog & Power Semiconductors","Machine Vision & 3D Cameras"],"lifecycle":[{"event":"open","at":"2026-08-14T00:00:00Z"}],"visa":[],"liveness":{"score":12,"band":"cold","label":"Long shot","p_open":1,"p_active":0.427,"p_room":0.28,"age_days":64,"expected_fill_days":25,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/onsemi-director-cybersecurity-operations","json_url":"https://alion.io/job/onsemi-director-cybersecurity-operations.json","meta":{"generated_at":"2026-10-18T04:39:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6940,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58717},"rest":"https://alion.io/mcp/rest/get_company?id=58717"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fonsemi-director-cybersecurity-operations"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fonsemi-director-cybersecurity-operations"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fonsemi-director-cybersecurity-operations"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/onsemi-director-cybersecurity-operations\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fonsemi-director-cybersecurity-operations"}]}