Principal - Cybersecurity Asset Intelligence
Cummins · Columbus, Indiana, United States
Motor Vehicle Manufacturing · 10,001+ employees
About the role
The Principal leads the cybersecurity operations team, overseeing incident response, threat monitoring, and the execution of security strategies across enterprise, cloud, and OT environments. They are responsible for managing SecOps outcomes, detection engineering programs, and mentoring security staff to ensure organizational resilience.
What they look for
Requirements
Candidates must possess a degree in Computer Science, Information Technology, Engineering, or equivalent experience, along with proven leadership in cybersecurity management. Preferred qualifications include professional certifications such as CISSP, CISM, or GIAC-related credentials.
Full description
Job Summary:
Responsible for leading the organization’s cybersecurity operations team, with a primary focus on incident response, threat monitoring, and the execution of cybersecurity strategies, policies, and risk management practices to safeguard the organization’s systems, data, and infrastructure. The manager serves as a coach and mentor to security professionals, builds operational processes aligned with best practices and industry standards, and partners with engineering, IT, and business to protect critical systems, infrastructure, and data from evolving threats. Serves as an accountable leader for the people, processes, and technologies that prevent, detect, investigate, and contain cyber threats across enterprise, cloud, and OT environments. Owns SecOps outcomes (24×7 monitoring & incident response), the detection engineering program (use-case lifecycle, signal quality, automation), and the threat hunting program
Key Responsibilities:
Leads the execution of complex responses to computer security incidents in alignment with organizational policies and industry best practices. Coordinates and communicates with multiple business units during incidents, providing updates and actionable recommendations. Oversees root cause analysis and ensures that lessons learned are integrated into improved processes and protections. Leads teams in assessing severity, developing mitigation strategies, and prioritizing risk reduction activities. Monitors security-related intelligence sources (e.g., SANS, BugTraq) to maintain situational awareness of current attacks and trends. Collaborates with Cybersecurity Engineering teams and business to communicate risks and recommend security enhancements. Ensures that security technologies employed by the operations and incident response teams support and enhance operational processes. Identifies opportunities to improve operational efficiency, standard operating procedures, and incident response playbooks. Leads the application of recognized cybersecurity and IT frameworks (e.g., NIST, ISO, ITIL, COBIT) in alignment with organizational processes and controls. Manages, coaches, and mentors cybersecurity operations staff, fostering a culture of learning, accountability, and continuous improvement. Defines team objectives, evaluates performance, and supports professional growth through training and development. Participates in industry task forces and working groups to stay informed on evolving threats and best practices, and fosters a culture of continuous improvement in cybersecurity practices and awareness. Contributes to organizational situational awareness by managing and leveraging cybersecurity data sources.
Cummins is an equal opportunity employer. Our policy is to provide equal employment opportunities to all qualified persons without regard to race, sex, color, disability, national origin, age, religion, union affiliation, sexual orientation, veteran status, citizenship, gender identity, or other status protected by law.
