VSOC Analyst

About the role

Join our team as a VSOC Analyst and become the frontline defender of our connected vehicle fleet. You will monitor live threats, lead incident response, and ensure the continuous security health of vehicles after they leave the factory, directly protecting customers and brand trust.

Key responsibilities

• Proactive Fleet Monitoring & Analysis: Use SIEM and dedicated VSOC tools to monitor and analyze security alerts and telemetry from the global vehicle fleet, triage incidents, and develop detection rules.
• Incident Response & Forensics: Lead technical response to verified cybersecurity incidents, perform digital forensics on vehicle logs, document timelines, and conduct post‑mortem reviews.
• Vulnerability Management & Remediation: Manage vulnerability intake from bug bounties and internal tests, collaborate with engineering and suppliers to deploy OTA or dealership updates, and track remediation effectiveness.
• Continuous Improvement & Reporting: Generate regular reports on fleet security posture, incident metrics, and threat trends; contribute to tool and process enhancements and stay current with emerging automotive threats.

Required profile

• Bachelor’s degree in Computer Science, Electrical Engineering, Cybersecurity or related field.
• 3+ years of hands‑on cybersecurity experience, with at least 1 year focused on automotive or IoT/embedded systems.
• Strong understanding of in‑vehicle networks (CAN, Ethernet, SOME/IP), ECUs, and automotive protocols.
• Familiarity with automotive cybersecurity standards such as ISO/SAE 21434, UN R155, GB44495.

Required skills

• Experience with SIEM and VSOC monitoring tools.
• Knowledge of CAN, Ethernet, SOME/IP and other automotive protocols.
• Scripting and automation using Python and PowerShell.
• Familiarity with automotive threat detection platforms (e.g., Upstream, Karamba, Argus).