Security Operations Manager
EmployeeJob Overview
TEAM
The security team at Woven by Toyota is on the cutting edge of many challenging security problems. We identify emerging security threats in autonomous vehicles and help design more secure systems. We work closely with internal platform teams to provide a secure development environment through tooling and automation, allowing developers to innovate quickly without compromising security.
WHO ARE WE LOOKING FOR?
We are seeking a Security Operations Center leader for the Japan region. Your team is responsible for triage and response to security alerts and incidents. You will work across the organization to build detection and response capabilities for a scalable incident lifecycle, and will collaborate with partner SOCs in the US and UK regions to provide 24/7 defensive operations to the Woven by Toyota enterprise.
This is the front-line team that responds to security threats and malicious activity in all of Woven by Toyota’s environments. You should know how to prioritize, communicate clearly and compellingly, and understand how to drive a high level of focus and excellence with a strong team. Woven by Toyota Security demands high standards, so a passion for and discipline around security and delivery is critical. You’ll report to the security operations senior manager, and come to the office 3x per week as per our hybrid work policy.
TEAM
The security team at Woven by Toyota is on the cutting edge of many challenging security problems. We identify emerging security threats in autonomous vehicles and help design more secure systems. We work closely with internal platform teams to provide a secure development environment through tooling and automation, allowing developers to innovate quickly without compromising security.
WHO ARE WE LOOKING FOR?
We are seeking a Security Operations Center leader for the Japan region. Your team is responsible for triage and response to security alerts and incidents. You will work across the organization to build detection and response capabilities for a scalable incident lifecycle, and will collaborate with partner SOCs in the US and UK regions to provide 24/7 defensive operations to the Woven by Toyota enterprise.
This is the front-line team that responds to security threats and malicious activity in all of Woven by Toyota’s environments. You should know how to prioritize, communicate clearly and compellingly, and understand how to drive a high level of focus and excellence with a strong team. Woven by Toyota Security demands high standards, so a passion for and discipline around security and delivery is critical. You’ll report to the security operations senior manager, and come to the office 3x per week as per our hybrid work policy.
RESPONSIBILITIES
- Lead our technical security operations team responsible for intrusion detection and incident response
- Respond to security incidents, conduct forensics and technical investigations
- Inspire, grow, and develop talent while providing vision, setting team direction, and leading effectively through outcomes rather than tasks
- Help define and execute strategy for detection, investigation, and incident response
- Create changes in the team to increase enterprise visibility and defensibility, and improve security operation processes, including an increase for automation where possible
- Measure and report on operational metrics, objectives, and key performance indicators to assure the team achieves operational excellence
- Solve problems in unique ways with an automation-first mindset
MINIMUM QUALIFICATIONS
- 1+ years of experience of technical leadership, or managing & developing high performance teams
- 5+ years of hands-on technical experience as a security professional
- Hands-on experience with AWS, Azure, GCP
- Ability to triage, investigate and respond to security alerts and conduct technical investigations of security incidents to identify root causes
- Experience explaining business impact of a security incident to a non-technical executive
NICE TO HAVES
- 3+ years of experience in technical leadership & developing high performance teams
- Experience in leading SOC improvement projects, large-scale SIEM, SOAR, EDR and other major security deployments
- Experience with Extended Detection and Response (XDR) tools such as Microsoft 365 Defender, Crowdstrike, etc
- Hands-on experience with a major forensics toolkit (Velociraptor, Encase, FTK, etc)
- Experience with operating under various privacy frameworks (CCPA, GDPR, etc)
- Significant experience with detection engineering, incident response, and threat intelligence