Manager, Automotive Product SOC

What You'll Do...

• Operational Monitoring and Incident Response: Direct daily PSOC operations including alert triage, incident coordination, containment, remediation, recovery, and closure.
• Cloud & Embedded Investigation and Resolution: Lead investigations of security events across cloud application stacks and embedded vehicle architectures using available logging and telemetry.
• People Leadership: Lead, mentor, and develop an established team of analysts, managing shift structure and operational readiness.
• Global Coverage Partnership: Partner with the Monitoring Global team to sustain seamless follow-the-sun coverage, consistent standards, and robust cross-region handoff.
• Operational Improvement and Feedback Loop: Provide structured feedback to the Monitoring Development team to identify friction points and improve detection logic, tooling, and response workflows.
• Cross-Functional Partnership: Collaborate closely with the Cyber Incident Response Team (CIRT), Product Development, and Enterprise IT to execute response playbooks and coordinate complex mitigations.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or Engineering, or related field; Master's degree preferred.
• 5+ years in cybersecurity including experience leading SOC, incident response, or security operations teams.
• Hands-on experience with cloud security operations on one or more major cloud platforms, including logging, monitoring, identity, and response workflows.
• Experience investigating and responding to incidents in hybrid environments spanning cloud services, enterprise IT, and connected/embedded systems.
• Experience partnering with engineering and infrastructure teams to triage, contain, and remediate production-impacting issues.
• Proven ability to manage high-pressure security incidents, mentor technical teams, and communicate clearly with senior leadership.

Preferred Qualifications

• 2+ years of people leadership or program leadership in SOC, cloud operations, or security engineering environments.
• Prior experience leading teams in 24x7 operations, including shift handoff, incident prioritization, and operational readiness.
• Familiarity with detecting and investigating threats across cloud and vehicle telemetry data, including log correlation and alert tuning.
• Technical understanding of embedded or automotive environments and the security considerations of cloud architecture.
• Background in building, refining, or operationalizing runbooks, playbooks, and escalation procedures at scale.
• Relevant certifications such as CISSP, CISM, GIAC, or cloud security certifications across AWS, Azure, or GCP.
• Ability to turn incidents into platform, process, or detection improvements.

Benefits

Immediate medical, dental, vision and prescription drug coverage
Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more
Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more
Vehicle discount program for employees and family members and management leases
Tuition assistance
Established and active employee resource groups
Paid time off for individual and team community service
A generous schedule of paid holidays, including the week between Christmas and New Year's Day
Paid time off and the option to purchase additional vacation time.

Note: This is a hybrid role, you are expected to relocate if you are not within commutable distance, and responsible to be on site 4 days a week. This position is a Leadership Level 6. The salary range for this position is $132,800 – $250,800. Visa sponsorship is not available for this position.