VSOC Analyst – Vehicle Security Operations

About the role

Join our team as a VSOC Analyst and become the frontline defender of our connected vehicle fleet. You will monitor live threats, lead incident response, and ensure the ongoing security health of vehicles after they leave the factory, directly protecting customers and brand trust.

Key responsibilities

• Monitor and analyze security alerts and telemetry from the global fleet using SIEM and dedicated VSOC tools.
• Triage incidents, conduct initial investigations, and assess impact severity.
• Develop and refine detection rules and use cases for novel attack patterns.
• Lead technical response to verified incidents, following playbooks and performing digital forensics on vehicle logs.
• Manage vulnerability intake, assessment, and prioritization from bug bounties, internal tests, and external researchers.
• Collaborate with engineering and suppliers to deploy OTA or dealership security updates.
• Generate regular reports on fleet security posture, incident metrics, and threat trends.
• Stay current with emerging automotive threats and industry best practices.

Required profile

• Bachelor’s degree in Computer Science, Electrical Engineering, Cybersecurity or related field.
• 3+ years of hands‑on cybersecurity experience, with at least 1 year focused on automotive or IoT/embedded systems.
• Proven experience in incident response and security monitoring in a live operations environment.
• Strong understanding of in‑vehicle networks (CAN, Ethernet, SOME/IP) and automotive protocols.
• Familiarity with automotive cybersecurity standards such as ISO/SAE 21434, UN R155, GB44495.
• Excellent analytical and communication skills.

Required skills

• SIEM platforms
• Vehicle Security Operation Center (VSOC) tools
• CAN, Ethernet, SOME/IP protocols
• Automotive cybersecurity standards (ISO/SAE 21434, UN R155, GB44495)
• Digital forensics and incident response
• Python scripting
• PowerShell scripting
• OTA update mechanisms