The Role
Lead global 24x7 security operations for converged IT/OT environments. Own SOC, detection engineering, incident command, threat intelligence, vulnerability management, MSSP/MDR governance, and automation/AI-enabled SecOps to protect manufacturing continuity and IP while meeting regulatory obligations.
Summary Generated by Built In
Job Summary:
About onsemi
onsemi (Nasdaq: ON) is a global leader in intelligent power and sensing technologies, driving disruptive innovations in automotive, industrial, and cloud markets. With global fab operations, design centers, and a worldwide supply chain, onsemi operates a converged IT and operational technology (OT) environment subject to rigorous regulatory and customer security obligations. The Security Operations function protects onsemi’s intellectual property, manufacturing continuity, and customer trust against a rapidly evolving threat landscape — including the emergence of frontier AI-enabled adversaries.
Position Summary
The Director, Security Operations is a senior leadership role within the Office of the CISO, accountable for the strategy, design, and 24x7x365 execution of onsemi’s global security operations across both IT and OT domains. This leader owns the Security Operations Center (SOC), threat detection and response, threat intelligence, vulnerability management, and the operational technology security program protecting global enterprise and manufacturing environments.
The Director will modernize detection and response through automation, agentic AI-enabled SecOps, and a measurable, risk-driven operating model. They will be a hands-on leader who balances strategic program ownership with operational rigor, manages managed security service provider (MSSP) relationships, and serves as a primary incident commander during high-severity events.
Key Responsibilities
Strategy & Program Leadership
- Define and execute the global security operations strategy and roadmap across converged IT and OT environments, aligned to onsemi’s business and manufacturing priorities.
- Build, lead, and develop a high-performing global SOC team and pod-based operating model spanning detection engineering, incident response, threat intelligence, and OT security.
- Establish and report security operations metrics, KPIs, and maturity (e.g., MTTD/MTTR, coverage, detection efficacy) to the CISO and executive leadership.
- Own the MSSP and managed detection and response (MDR) relationships, including contract strategy, performance governance, and the build-versus-buy roadmap for SOC capabilities.
Detection, Response & Operations
- Direct 24x7x365 monitoring, triage, investigation, and response across endpoint, network, cloud, identity, AI runtime, and OT telemetry.
- Serve as senior incident commander for P1/P2 incidents, coordinating cross-functional response, executive communication, and post-incident review.
- Mature the detection engineering function, threat hunting, and purple-team practices to continuously improve coverage against MITRE ATT&CK and ICS/OT threat models.
- Lead the vulnerability management and threat intelligence programs, prioritizing remediation based on exploitability and business risk.
OT & Manufacturing Security
- Extend security operations visibility and response into manufacturing OT environments, partnering with manufacturing and engineering teams to protect production continuity.
- Champion IT/OT convergence with security models that respect the availability, safety, and uptime requirements of industrial control systems.
AI-Enabled SecOps & Automation
- Drive adoption of automation, SOAR, and agentic AI SecOps platforms to scale detection and response while improving analyst efficiency and reducing alert fatigue.
- Anticipate and defend against frontier AI-enabled threats, embedding AI-aware detection and response into the operating model.
Governance, Compliance & Collaboration
- Ensure security operations support onsemi’s regulatory and customer obligations, including export-control (ITAR/EAR) data handling, SOX, GDPR, and customer/industry security requirements.
- Partner with IT, Trust & Assurance, legal, privacy, and business stakeholders to align operational response with enterprise risk and incident response obligations.
- Manage the security operations budget, vendor portfolio, and tooling rationalization to deliver measurable risk reduction and cost efficiency.
Required Qualifications
- 12+ years of progressive cybersecurity experience, with 5+ years leading security operations, SOC, or incident response functions.
- Demonstrated experience building and leading distributed 24x7 SOC teams, including MSSP/MDR governance and hybrid operating models.
- Deep expertise in threat detection and response, SIEM/SOAR, EDR/XDR, threat intelligence, and modern detection engineering.
- Proven incident command experience leading high-severity, business-impacting incidents end to end.
- Strong people leadership: building, scaling, and retaining technical security teams.
- Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent experience.
Preferred Qualifications
- Experience securing converged IT/OT environments, ideally in semiconductor, manufacturing, or other critical-infrastructure industries.
- Familiarity with export-control (ITAR/EAR) data residency requirements and Fortune 500 regulatory environments (SOX, GDPR).
- Hands-on experience deploying automation and agentic AI SecOps platforms in production.
- Industry certifications such as CISSP, CCSP, GCIA, GCIH, or equivalent.
- Knowledge of ISO27001, NIST CSF 2.0, MITRE ATT&CK, and ICS/OT security frameworks (e.g., IEC 62443).
Leadership Competencies
- Operates with executive presence and communicates risk in business and quantified terms.
- Balances strategic vision with operational discipline and a bias for measurable outcomes.
- Builds trusted partnerships across IT, OT, manufacturing, and business stakeholders.
- Leads calmly and decisively under pressure during active security incidents.
Responsibilities:
Strategy & Program Leadership
- Define and execute the global security operations strategy and roadmap across converged IT and OT environments, aligned to onsemi’s business and manufacturing priorities.
- Build, lead, and develop a high-performing global SOC team and pod-based operating model spanning detection engineering, incident response, threat intelligence, and OT security.
- Establish and report security operations metrics, KPIs, and maturity (e.g., MTTD/MTTR, coverage, detection efficacy) to the CISO and executive leadership.
- Own the MSSP and managed detection and response (MDR) relationships, including contract strategy, performance governance, and the build-versus-buy roadmap for SOC capabilities.
Detection, Response & Operations
- Direct 24x7x365 monitoring, triage, investigation, and response across endpoint, network, cloud, identity, AI runtime, and OT telemetry.
- Serve as senior incident commander for P1/P2 incidents, coordinating cross-functional response, executive communication, and post-incident review.
- Mature the detection engineering function, threat hunting, and purple-team practices to continuously improve coverage against MITRE ATT&CK and ICS/OT threat models.
- Lead the vulnerability management and threat intelligence programs, prioritizing remediation based on exploitability and business risk.
OT & Manufacturing Security
- Extend security operations visibility and response into manufacturing OT environments, partnering with manufacturing and engineering teams to protect production continuity.
- Champion IT/OT convergence with security models that respect the availability, safety, and uptime requirements of industrial control systems.
AI-Enabled SecOps & Automation
- Drive adoption of automation, SOAR, and agentic AI SecOps platforms to scale detection and response while improving analyst efficiency and reducing alert fatigue.
- Anticipate and defend against frontier AI-enabled threats, embedding AI-aware detection and response into the operating model.
Governance, Compliance & Collaboration
- Ensure security operations support onsemi’s regulatory and customer obligations, including export-control (ITAR/EAR) data handling, SOX, GDPR, and customer/industry security requirements.
- Partner with IT, Trust & Assurance, legal, privacy, and business stakeholders to align operational response with enterprise risk and incident response obligations.
- Manage the security operations budget, vendor portfolio, and tooling rationalization to deliver measurable risk reduction and cost efficiency.
Qualifications
Required Qualifications
- 12+ years of progressive cybersecurity experience, with 5+ years leading security operations, SOC, or incident response functions.
- Demonstrated experience building and leading distributed 24x7 SOC teams, including MSSP/MDR governance and hybrid operating models.
- Deep expertise in threat detection and response, SIEM/SOAR, EDR/XDR, threat intelligence, and modern detection engineering.
- Proven incident command experience leading high-severity, business-impacting incidents end to end.
- Strong people leadership: building, scaling, and retaining technical security teams.
- Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent experience.
Preferred Qualifications
- Experience securing converged IT/OT environments, ideally in semiconductor, manufacturing, or other critical-infrastructure industries.
- Familiarity with export-control (ITAR/EAR) data residency requirements and Fortune 500 regulatory environments (SOX, GDPR).
- Hands-on experience deploying automation and agentic AI SecOps platforms in production.
- Industry certifications such as CISSP, CCSP, GCIA, GCIH, or equivalent.
- Knowledge of ISO27001, NIST CSF 2.0, MITRE ATT&CK, and ICS/OT security frameworks (e.g., IEC 62443).
onsemi (Nasdaq: ON) is driving disruptive innovations to help build a better future. With a focus on automotive and industrial end-markets, the company is accelerating change in megatrends such as vehicle electrification and safety, sustainable energy grids, industrial automation, and 5G and cloud infrastructure. With a highly differentiated and innovative product portfolio, onsemi creates intelligent power and sensing technologies that solve the world’s most complex challenges and leads the way in creating a safer, cleaner, and smarter world.
More details about our company benefits can be found here:
https://www.onsemi.com/careers/career-benefits
onsemi is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, ancestry, national origin, age, marital status, pregnancy, sex, sexual orientation, physical or mental disability, medical condition, genetic information, military or veteran status, gender identity, gender expression, or any other protected category under applicable federal, state, or local laws.
If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process, or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact [email protected] for assistance.
Skills Required
- 12+ years of progressive cybersecurity experience
- 5+ years leading security operations, SOC, or incident response functions
- Experience building and leading distributed 24x7 SOC teams and MSSP/MDR governance
- Deep expertise in threat detection and response, SIEM/SOAR, EDR/XDR, threat intelligence, and detection engineering
- Proven incident command experience leading high-severity, business-impacting incidents end to end
- Strong people leadership with experience building, scaling, and retaining technical security teams
- Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience
- Experience securing converged IT/OT environments (preferred)
- Familiarity with export-control (ITAR/EAR), SOX, GDPR (preferred)
- Hands-on experience deploying automation and agentic AI SecOps platforms in production (preferred)
- Industry certifications such as CISSP, CCSP, GCIA, GCIH (preferred)
- Knowledge of ISO27001, NIST CSF 2.0, MITRE ATT&CK, and ICS/OT security frameworks (IEC 62443) (preferred)
onsemi Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about onsemi and has not been reviewed or approved by onsemi.
-
Retirement Support — Retirement programs are highlighted by a U.S. 401(k) with a 100% match on the first 4% and immediate vesting. International plans such as Ireland’s defined contribution scheme and Germany’s company-funded pension elements reinforce long-term savings.
-
Leave & Time Off Breadth — Time-off policies include ten paid holidays, flexible vacation for exempt employees, and three to five weeks of vacation for non-exempt staff as tenure grows, alongside sick time accrual. Paid leaves span parental, bereavement, jury duty, and military service, with Europe locations offering additional statutory and seniority-based days.
-
Parental & Family Support — Family supports include eight weeks of paid parental leave, company-sponsored backup care for children, adults, and pets, and up to $15,000 in adoption assistance. Regional provisions such as Switzerland’s child allowance and accessible EAP counseling show added attention to household needs.
onsemi Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
We are building a better future through intelligent technology. For over 60 years, onsemi and its ancestors have been leading the world’s greatest technology advancements. onsemi (Nasdaq: ON) is driving disruptive innovations to help build a better future. With a focus on automotive and industrial end-markets, the company is accelerating change in megatrends such as vehicle electrification and safety, sustainable energy grids, industrial automation, and 5G and cloud infrastructure. With a highly differentiated and innovative product portfolio, onsemi creates intelligent power and sensing technologies that solve the world’s most complex challenges and leads the way in creating a safer, cleaner, and smarter world.
.jpg)
