Source description
About the role
As a Threat Detection and Response (TDR) Engineer at ACV, you will play a crucial role in building and maintaining the Security Operations Center (SOC) to protect our SaaS platform, customer data, and the integrity of our wholesale automotive auction environment. Your responsibilities will include: - Incident Response & Management: - Lead security investigations, incident coordination, and management for security events. - Develop and maintain an Incident Response Policy aligned with industry best practices and compliance requirements. - SIEM Management: - Design and maintain a robust Security Information and Event Monitoring (SIEM) system. - Develop a roadmap for SIEM enhancements to proactively identify and respond to threats. - SOC Build & Operations: - Oversee the build and operations of a Security Operations Center tailored to ACV Auctions' requirements. - Manage alert prioritization, investigation, and escalation processes. - SOAR Development & Automation: - Implement Security Orchestration, Automation, and Response (SOAR) workflows to enhance SOC efficiency. - Identify and implement automation opportunities regularly. - Detection & Response (TDR) Program: - Develop a comprehensive Detection and Response program for the enterprise. - Conduct security testing activities to improve security awareness across the organization. - Security Brand & Leadership: - Act as a security mentor within the organization. - Collaborate effectively with cross-functional teams to integrate security into all aspects of the business. - Compliance & Risk Management: - Stay updated on regulatory requirements and align security practices accordingly. - Contribute to risk assessments and mitigation efforts. Qualifications Required: - 8+ years of experience. - Bachelor's degree. - Proficiency in English. - Strong communication, interpersonal, and leadership skills. - Knowledge of CASB, DLP, and SASE technologies. - Ability to work effectively in a dynamic environment. - Hands-on experience in implementing data security controls in cloud environments. - Familiarity with Linux, Kubernetes, DevOps, AWS, TCP/IP Networking, and threat actors' behaviors. At ACV, we foster a people-first mindset and provide competitive compensation packages along with learning and development opportunities to help you advance in your career. Join us in our mission to invest in our people and technology for the success of our customers. As a Threat Detection and Response (TDR) Engineer at ACV, you will play a crucial role in building and maintaining the Security Operations Center (SOC) to protect our SaaS platform, customer data, and the integrity of our wholesale automotive auction environment. Your responsibilities will include: - Incident Response & Management: - Lead security investigations, incident coordination, and management for security events. - Develop and maintain an Incident Response Policy aligned with industry best practices and compliance requirements. - SIEM Management: - Design and maintain a robust Security Information and Event Monitoring (SIEM) system. - Develop a roadmap for SIEM enhancements to proactively identify and respond to threats. - SOC Build & Operations: - Oversee the build and operations of a Security Operations Center tailored to ACV Auctions' requirements. - Manage alert prioritization, investigation, and escalation processes. - SOAR Development & Automation: - Implement Security Orchestration, Automation, and Response (SOAR) workflows to enhance SOC efficiency. - Identify and implement automation opportunities regularly. - Detection & Response (TDR) Program: - Develop a comprehensive Detection and Response program for the enterprise. - Conduct security testing activities to improve security awareness across the organization. - Security Brand & Leadership: - Act as a security mentor within the organization. - Collaborate effectively with cross-functional teams to integrate security into all aspects of the business. - Compliance & Risk Management: - Stay updated on regulatory requirements and align security practices accordingly. - Contribute to risk assessments and mitigation efforts. Qualifications Required: - 8+ years of experience. - Bachelor's degree. - Proficiency in English. - Strong communication, interpersonal, and leadership skills. - Knowledge of CASB, DLP, and SASE technologies. - Ability to work effectively in a dynamic environment. - Hands-on experience in implementing data security controls in cloud environments. - Familiarity with Linux, Kubernetes, DevOps, AWS, TCP/IP Networking, and threat actors' behaviors. At ACV, we foster a people-first mindset and provide competitive compensation packages along with learning and development opportunities to help you advance in your career. Join us in our mission to invest in our people and technology for the success of our cus