Manager, Intelligence & Operations

This individual will serve as the Manager of the Security Intelligence and Operations team within the Exostar Security Office (ESO) and report to the CISO & VP of Information Security. This person leads Exostar’s centralized security operations and security platform capabilities supporting highly regulated cloud services for Aerospace & Defense and Life Sciences customers. This role is accountable for the operational effectiveness, maturity, and strategic evolution of Exostar’s security monitoring, incident response, vulnerability management, and cloud security capabilities, with a strong emphasis on Azure and Microsoft 365–based FedRAMP and managed service offerings.

This position partners closely with security governance, compliance, and architecture. The role supports audits and regulatory activities by ensuring security operations, evidence, and response capabilities function as designed, while primary ownership for control design and compliance strategy resides with a dedicated team.

This position combines technical security leadership with people, vendor, and program management, ensuring security operations scale effectively, remain compliant with regulatory obligations, and align with business growth. While technical depth is required, success in this role depends on the ability to set direction, prioritize work, mature processes, and leading through others.

The team consists of one direct-report security engineer and a rotating group of contractors providing 24/7 monitoring, engineering support, and continuous monitoring activities

• Own the day-to-day and strategic operation of security monitoring, incident response, and threat detection across cloud and on-prem environments.
• Serve as the technical escalation and decision authority for security incidents, advising executive stakeholders and acting as a core member of the Crisis Response Team.
• Lead and mature incident response, digital forensics, and threat intelligence capabilities across Azure, Microsoft 365, and supporting infrastructure.
• Ensure 24/7 security operations coverage through effective contractor oversight, clear runbooks, and defined escalation paths.
• Cloud & Microsoft Security Focus
• Provide operational leadership and direction for security controls and monitoring related to Azure, Microsoft Entra , Defender, Sentinel, Secure Score, and Microsoft 365.
• Partner with engineering and product teams to embed security in Dev Sec Ops .
• Advise on secure cloud architecture decisions and ensure security tooling aligns with multi-tenant and regulated service models.

• Direct the Vulnerability Management program, covering infrastructure, applications, and cloud configurations.
• Lead threat hunting and operational risk assessments, identifying gaps in detection, response, and visibility.
• Support audits and compliance activities by providing operational evidence, incident records, and control validation.
• Provide input and recommendations to governance and architecture teams based on operational findings and observed risk trends.

• Own the security tooling ecosystem, including SIEM, EDR, IDS, email security, DLP, and application control technologies.
• Develop and maintain security technology roadmaps, evaluating new tools and capabilities based on risk reduction, scalability, and cost/benefit.
• Drive standardization, documentation, and operational maturity through SOPs, playbooks, and metrics.
• Coach and mentor the security engineer and contractors, setting clear expectations, priorities, and performance standards.
• Balance contractor-driven execution with internal ownership, ensuring knowledge retention and accountability.
• Partner closely with IT, Cloud Engineering, Product, Compliance, and Executive Leadership to integrate security into business initiatives.
• Communicate complex security topics clearly to both technical and non-technical stakeholders.
• Drive strategic and operational direction to the team, and maintain responsibility for ensuring the maintenance, operations, and support of complex security products.
• Provide…