Senior SOC Specialist Bucharest

Senior SOC Specialist
Bucureşti
Bucharest, Bucharest, Romania

Push boundaries. Explore ideas. Reshape tomorrow. Join Garrett and grow your career while helping top vehicle brands accelerate towards a cleaner, safer, and smarter future.

Garrett is the true pioneer of automotive turbocharging dating back more than 60 years and continues today as the world's leader in turbo technology solutions and an experienced supplier of electric boosting products and automotive software to support passenger cars, commercial vehicles and
- highway equipment. With a worldwide footprint of engineering centers, testing labs and manufacturing facilities, Garrett serves all major automotive companies to implement key differentiated technology offerings.

Responsibility of this position to secure and identify cybersecurity threats for Garrett IT and Plant networks. Position is responsible to follow SOC Incident management process. Investigate and triage security events for cybersecurity intusions, data exfiltration and other cybersecurity incidents in the organization. Constantly understand threat intelligence sources and create detection and prevention controls to alert and mitigate the threats. Constantly update the event sources to provide comprehensive coverage of detection and preventive controls. Prioritize detection and response plan based on the impact to Garrett assets people, data assets, finance and brand image.

Responsibilities:

SOC Operations

• Automate SOC monitoring and resolution for incidents reported;

• Finetuning SIEM platform and use cases development to address emerging threats;

• Co-ordinate with MSSP partner for key initiatives, enable and provide requirements and support delivery of projects;

• Deploy robust incident response, forensics and threat intelligence processes;

• Lead the delivery of incident management system enhancements and modifications;

• Drive process improvements assisting to identify opportunities for positive change, improving SOC's overall detection and response capabilities.

Threat Intelligence and Hunting

• Gather threat intelligence from the industry and discern the applicable threats for our landscape; 

• Investigate the network systems or endpoints to identify threat patterns or indicate compromise and analyze the threat;

• Coordinate with the IT and Plant IT team to resolve the cyber threats and prevent the same attack from recurring;

• Analyzing and detecting cyber threats that affect business operations using threat intelligence.

• Monitoring the security patterns to identify, isolate, and detect the threats before attackers tend to exploit them.

• Planning, creating, and implementing security solutions for the organization.

Incident Response

• Lead incident response, including steps to minimize the impact and then conducting a technical and forensic investigation into how the breach happened and the extent of the damage;

• Track security incident related KPIs and metrics, and assist with reporting on those metrics to senior management;

• Define & Implement technology roadmap to mitigate threats across Endpoints & Network.

YOU NEED:

• Bachelor’s degree in Information Technology or related discipline;

• Overall 10+ years of relevant IT / Cyber Security experience

• Minimum 5+ years of technology experience in SOC including SIEM, End Point Detection & Response, Network Detection & Response, IDP and IDS, Email Security, SOC Operations and Incident Management

• Demonstrated proficiency with the IT Security Common Body of Knowledge required for enabling security concepts on varied technology.

• Expertise and demonstrated experience in SOC Incident management, SIEM, Endpoint security (EDR, Antivirus, etc), Network Security (Firewalls, Proxy, etc),

BENEFITS

LEARN & DEVELOP

RELAX & WELL-BEING