{"id":1613896,"url":"https://alion.io/job/trex-manager-information-technology-security-operations-incident-response","title":"Manager, Information Technology Security Operations & Incident Response","company":{"id":1774983,"name":"Trex","domain":"trex.com","url":"https://alion.io/company/trex-com","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"UltiPro","truth_index":{"grade":"B","score":82,"open_postings":11,"ghost_share":0,"stale_share":0.909,"repost_share":0,"time_to_fill_p50_days":14,"computed_at":"2026-10-14T06:34:16Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Winchester, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":140000,"max":175000,"currency":"USD","period":"year","gross":null,"usd_annual":175000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-09T19:01:59Z","employer_posted_date":"2026-09-09","last_verified_at":"2026-10-15T02:34:16Z","board_verified":true,"closed_at":null,"days_open":35,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":35},"description":"When you work at Trex, you’re helping to grow and enhance a true original. You join a company that boldly launched an entire industry … and still leads the way.\nWe are looking for a Manager, Security Operations & Incident Response to support our team by leading Trex’s day-to-day security operations, incident response program, managed security service partnerships, and operational governance of the endpoint, cloud, email, vulnerability management, and detection platforms. This role This role provides centralized leadership and accountability for security operations, ensuring that alert triage, incident response, vulnerability remediation, threat detection, and managed service performance are coordinated, measurable, and aligned with business risk.\nKey Duties and Responsibilities:\nSecurity Operations Management\nLead 24x7 security operations delivered through the managed service model, including alert triage governance, escalation procedures, response expectations, service quality, and performance measurement against contractual SLAs.\nProvide oversight of the SOC operating model, ensuring internal teams, offshore resources, and managed service providers have clearly defined responsibilities, documented processes, and measurable outcomes.\nDirect the detection engineering roadmap across managed endpoint detection and response, cloud-native security information and event management, and extended detection and response platforms, ensuring detection content reflects Trex’s manufacturing environment, threat model, and technology architecture.\nPartner with cybersecurity, infrastructure, networking, endpoint, OT, and application teams to ensure security operations are integrated into broader IT service delivery and business operations.\nIncident Response\nOwn the end-to-end incident response lifecycle, including preparation, detection, containment, eradication, recovery, lessons learned, and post-incident improvement activities.\nLead executive-facing communications during high-severity security events, ensuring clear, timely, and business-appropriate updates are provided to leadership and key stakeholders.\nMaintain the on-call rotation, escalation model, and quarterly tabletop exercise cadence, including executive-level tabletop exercises with Legal, Finance, Communications, and other business stakeholders.\nEnsure Trex maintains readiness for SEC 4-day 8-K cyber incident reporting, including materiality determination workflows, coordination with Legal, Finance/CFO, Investor Relations, and post-incident disclosure preparation.\nVulnerability Management and Platform Operations\nOwn the vulnerability management program, including enterprise vulnerability scanning strategy, remediation governance, SLA tracking, exception handling, and coordination with IT Platforms, Servers, and application owners.\nLead the application control and allowlisting deployment and tuning program in partnership with IT Platforms and End User Computing, including business change management, allowlisting governance, and false-positive resolution.\nOversee operational security capabilities across secure web gateway, email security, endpoint detection and response, extended detection and response, security information and event management, vulnerability management, application control, and related security platforms.\nSupport Zero Trust and secure access initiatives, including zero trust network access rollout, legacy remote access VPN decommission planning, and conditional access integration in environments using a third-party primary endpoint detection and response platform.\nVendor and Managed Service Management\nManage managed security service provider and managed detection and response vendor relationships, including service transitions, ongoing service governance, SLA management, escalation handling, and vendor performance reviews.\nCoordinate with internal stakeholders and vendors to ensure security platforms, managed services, and incident response retainers are aligned to Trex’s operational requirements and risk profile.\nLead structured knowledge transfer of platform ownership from in-house senior staff to offshore managed service resources, including acceptance criteria, documentation, service expectations, and quarterly review milestones.\nBusiness Partnership and Compliance Support\nWork closely with IT Platforms and Servers, Engineering, Legal, Internal Audit, End User Computing, and other business partners on shared workstreams including segmentation, network access control modernization, conditional access, OT/ICS security, and security operations maturity.\nSupport M&A cyber due diligence and post-close integration activities in partnership with the Security Architect and other IT leaders.\nContribute to Trex’s NIST CSF maturity targets and help align security operations practices with NIST CSF, NIST 800-53, CIS Critical Security Controls, SOX ITGC expectations, and cybersecurity disclosure obligations.\nLeadership and Team Development\nManage and develop a hybrid team of in-house and offshore security resources responsible for incident response, vulnerability management, cloud security, email security, platform operations, and managed SOC coordination.\nProvide coaching, prioritization, performance direction, and operational guidance to ensure the team can support current-state operations while maturing Trex’s security operations capability.\nEstablish clear operating procedures, documentation expectations, accountability models, and review cadences to ensure work is repeatable, measurable, and sustainable as Trex scales.\nEducation and Experience:\nBachelor’s degree in computer science, Information Systems, Cybersecurity, or a related field, or equivalent combination of education and professional work experience. \n7-10 years of progressive information security experience, including at least three years of direct people leadership in security operations, incident response, SOC management, or a closely related function. \nRequired Skills and Qualifications:\nDemonstrated experience leading incident response for a mid-size or enterprise organization, including communication with executives and business stakeholders during high-severity events. \nHands-on experience or strong operational oversight of a primary enterprise endpoint detection and response platform, with working knowledge of an extended detection and response or telemetry correlation platform operating alongside a third-party primary endpoint detection and response solution. \nWorking experience with cloud-native security information and event management for correlation, detection engineering, and query-based analysis. \nExperience managing MSSP, MDR, or SOC service provider relationships, including SLA governance, transition planning, escalation management, and performance measurement. \nExperience working in a publicly traded, SOX-scoped, or audit-sensitive environment, with familiarity with cyber-related SEC disclosure expectations. \nOne or more relevant professional certifications, or equivalent experience, such as CISSP, GCIH, GCIA, GCFA, or CISM. \nBase Salary Range $140,000-$175,000 annually \nThe salary range provided serves as a general guideline for potential compensation for this position. It reflects the base salary and does not account for other benefits or additional compensation opportunities that may apply. This role is also eligible for further compensation through an annual/sales bonus, in addition to the base salary.\nAt Trex, individual base salaries are determined based on various factors, including relevant skills, qualifications, experience, and geographic location. We are committed to maintaining pay equity and consider the internal equity of our existing team members when finalizing compensation offers. In addition to competitive pay, Trex offers a comprehensive benefits package, which is detailed below.\nWHO WE ARE\nOver 30 years ago, our founders created the world's first high-performance, low-maintenance composite decking and outdoor living products. That entrepreneurial spirit still drives us today as we continue to redefine our industry and lead the way for what’s next in outdoor living. Today, Trex is the world’s #1 brand of sustainably made, wood-alternative decking and deck railing - all proudly manufactured in the U.S.A. As a publicly traded company [NYSE: TREX], we take pride in being the largest recycler of plastic film in the country and caring for the communities and the planet where we live. We nurture meaningful connections, from local engagement and investment to eco-friendly products and sustainable manufacturing processes.\nAt Trex, you’ll become part of a diverse yet unified team who sustain the trailblazing spirit and strengths that made Trex the industry leader-learning, adapting, solving and succeeding.\nWe welcome new ideas and fresh perspectives, and we encourage you to bring your best to help us shape the future of Trex.\nBeing a leader means persevering even when there’s not a road map; embracing groundbreaking as a way of life. We encourage multiple perspectives and welcome diverse people who problem-solve, adapt and innovate-always with a firm foundation in safety and integrity.\nBENEFITS & PERKS\nWe believe that effort should be rewarded. We take care of you as part of our Trex family so you can take care of yours. Here are some of the perks beyond the paycheck:\nTime Off - We’ll give you paid holidays and paid vacation.\nHealth, Dental and Vision Insurance - Choose from a variety of options. We’ll cover a generous share of the cost. Plus, you can earn lower rates through our wellness program.\n401(k) With Company Match - Save for your retirement and we’ll match it dollar for dollar.\nTuition Reimbursement - We’re all about lifting each other to the next level. When you’re ready to get the degree, we’ll pick up part of the tab.\nTraining and Education - We offer dozens of options to boost your performance - both online and on-site nearby.\nStock Purchase Program - Invest in Trex at a discounted price.\nEmployee Discount Program - When you make the World’s No. 1 Decking Brand, you’ll probably want to enjoy the finished product yourself. We’ll give you a discount.\nCAREER ADVANCEMENT\nAt Trex, you can take pride in craftsmanship. There’s an art and a science to what we do, and we never stop working to refine and improve. That means no matter how long you’ve been with Trex, you have ongoing opportunities to grow your expertise-enhancing your career, your team, and our shared efforts. You will help shape our future.\nTrex is proud to be an Equal Opportunity Employer. We are committed to creating a diverse and inclusive environment for all employees and do not discriminate on the basis of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. All qualified applicants will receive consideration for employment without regard to these or any other characteristics protected by law\nTrex participates in E-Verify to confirm the employment eligibility of all newly hired employees. E-Verify is a web-based system operated by the Department of Homeland Security (DHS) and the Social Security Administration (SSA) that allows employers to electronically verify the employment eligibility of their employees. For more information, please visit www.dhs.gov/E-Verify.","description_format":"text","description_chars":11393,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":3,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Equity","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Endpoint Security"],"lifecycle":[{"event":"open","at":"2026-10-01T20:25:37Z"}],"visa":[],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":1,"p_active":0.446,"p_room":0.35,"age_days":34,"expected_fill_days":14,"reasons":["conf:3","stale_co","win:tail"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":175000,"is_top_pay":true},"html_url":"https://alion.io/job/trex-manager-information-technology-security-operations-incident-response","json_url":"https://alion.io/job/trex-manager-information-technology-security-operations-incident-response.json","meta":{"generated_at":"2026-10-15T04:47:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7041,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1774983},"rest":"https://alion.io/mcp/rest/get_company?id=1774983"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftrex-manager-information-technology-security-operations-incident-response"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftrex-manager-information-technology-security-operations-incident-response"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftrex-manager-information-technology-security-operations-incident-response"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/trex-manager-information-technology-security-operations-incident-response\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftrex-manager-information-technology-security-operations-incident-response"}]}