Security Operation Center Manager

Job Purpose

Monitor, detect, analyze, and respond to cyber security incidents and threats. Lead security operations center with a focus on protecting organization IT – OT – IIOT.  Play an important role in maintaining the security of the organization by implementing security protocols & security processes and collaborating with stakeholders to enhance security posture.

 Job Responsibilities

• Oversee daily SOC operations to ensure 24/7 threat monitoring and incident response.
• Oversee SOC tools like SIEM, threat intelligence platforms, and EDR solutions.
• Evaluate and recommend new technologies to enhance SOC capabilities, ensure compatibility with automotive- specific technology and standards.
• Ensure tools are updated, configured properly, and fully operational.
• Analyze and evaluate network, system, and security alerts performing triage to include determining scope, urgency and potential impact, identifying the specific vulnerability.
• Oversee all enterprise-wide incident reporting, including review for compliance with established standards and appropriate follow up activities.
• Lead the incident response process, including detection, analysis, containment, and recovery.
• Act as an escalation point for complex incidents, ensure timely resolution
• Collaborate with other departments to address security incidents and mitigate risks.
• Work closely with IT, compliance and audit teams to align SOC operations with business goals, ensure SOC processes comply with regulatory and international standards, support internal and external security audits.
• Stay updated on the latest cyber threats, vulnerabilities, and attack methods.
• Incorporate threat intelligence into SOC processes and proactive threat-hunting initiatives.
• Provide management with detailed incident reports and trend analyses.
• Develop strategic plans to improve SOC efficiency and effectiveness.
• Recruit, train, and mentor SOC staff to maintain high performance teams.
• Develop and enforce standard operating procedures (SOPs) and policies.
• Develop and deliver security metrics and incident trend reports with automotive specific insights, conduct monthly review to evaluate the SOC performance

Requirements

 Education and Experience

• Bachelor’s degree in computer science, Information Security.
• 7 – 10 years of experience

Knowledge, skills and abilities

• Proficiency in SIEM, IDS/IPS, EDR, and other SOC tools.
• Strong understanding of cybersecurity frameworks (NIST, PCI, ISO 27001, ISO 21434).
• Experience with threat analysis, vulnerability management, and incident response.
• Results-driven individual who can manage multiple complex assignments, manage assignments based on criticality, in a timely and professional manner
• Professionally handle confidential matters and exhibit the appropriate level of judgment and decision making commensurate with the position and responsibilities
• Outstanding communication capabilities of explaining technical concepts to non-technical audiences.
• Strong analytical and problem-solving skills.
• Ability to work under pressure during critical incidents.