汽车信息安全运营工程师（VSOC）

About the role

You will be the frontline defender of a global fleet of connected vehicles, monitoring live threats, leading incident response, and maintaining the security health of vehicles after they leave the factory. Your work directly protects customers and upholds brand trust.

Key responsibilities

• Monitor and analyse security alerts and telemetry from the vehicle fleet using SIEM and VSOC tools.
• Tri­age incidents, conduct initial investigations, and assess impact severity.
• Develop and refine detection rules and use cases for novel attack patterns.
• Lead technical response to verified cyber incidents, following established playbooks.
• Perform digital forensics on vehicle logs and data to determine root cause and scope.
• Manage vulnerability intake, assessment, and prioritisation from bug‑bounty programs and internal testing.
• Collaborate with engineering and supplier teams to design, validate, and deploy OTA or dealership security updates.
• Generate regular reports on fleet security posture, incident metrics, and emerging threat trends.

Required profile

• Bachelor’s degree in Computer Science, Electrical Engineering, Cybersecurity or related field.
• 3+ years of hands‑on cybersecurity experience, with at least 1 year in automotive or IoT/embedded systems.
• Proven experience in incident response and security monitoring in a live‑operations environment.
• Strong understanding of in‑vehicle networks (CAN, Ethernet, SOME/IP) and automotive protocols.
• Familiarity with automotive cybersecurity standards such as ISO/SAE 21434, UN R155, GB44495.
• Excellent analytical and communication skills.

Required skills

• SIEM platforms
• Vehicle Security Operation Center (VSOC) tools
• CAN, Ethernet, SOME/IP protocols
• Digital forensics and incident response
• Log and network‑traffic analysis
• Python scripting
• PowerShell scripting
• OTA update mechanisms