Job Description
Job Purpose
Monitor, detect, analyze, and respond to cyber security incidents and threats. Lead security operations center with a focus on protecting organization IT – OT – IIOT. Play an important role in maintaining the security of the organization by implementing security protocols & security processes and collaborating with stakeholders to enhance security posture.
Job Responsibilities
- Oversee daily SOC operations to ensure 24/7 threat monitoring and incident response.
- Oversee SOC tools like SIEM, threat intelligence platforms, and EDR solutions.
- Evaluate and recommend new technologies to enhance SOC capabilities, ensure compatibility with automotive- specific technology and standards.
- Ensure tools are updated, configured properly, and fully operational.
- Analyze and evaluate network, system, and security alerts performing triage to include determining scope, urgency and potential impact, identifying the specific vulnerability.
- Oversee all enterprise-wide incident reporting, including review for compliance with established standards and appropriate follow up activities.
- Lead the incident response process, including detection, analysis, containment, and recovery.
- Act as an escalation point for complex incidents, ensure timely resolution
- Collaborate with other departments to address security incidents and mitigate risks.
- Work closely with IT, compliance and audit teams to align SOC operations with business goals, ensure SOC processes comply with regulatory and international standards, support internal and external security audits.
- Stay updated on the latest cyber threats, vulnerabilities, and attack methods.
- Incorporate threat intelligence into SOC processes and proactive threat-hunting initiatives.
- Provide management with detailed incident reports and trend analyses.
- Develop strategic plans to improve SOC efficiency and effectiveness.
- Recruit, train, and mentor SOC staff to maintain high performance teams.
- Develop and enforce standard operating procedures (SOPs) and policies.
- Develop and deliver security metrics and incident trend reports with automotive specific insights, conduct monthly review to evaluate the SOC performance
