Vehicle Security Operations Engineer

Renrui Hr; Vitoria; Presencial; EUR 50.000 - 70.000; Jornada completa

Descripción de la vacante

Renrui Hr is seeking a Vehicle Security Operations Engineer for a leading global automotive OEM in Barcelona. You will oversee local cybersecurity operations for connected vehicles, cloud platforms and backend services across Europe, monitor security events and coordinate with HQ and partners.

The role requires 3+ years in cybersecurity operations, hands-on with SIEM/IDS, incident response, and knowledge of ISO/SAE 21434 and GDPR.

Formación

• Bachelor's degree or above in Computer Science, Cybersecurity, Communications Engineering or a related field.
• At least 3 years of professional experience in cybersecurity operations, SOC, incident response or detection engineering.
• Hands-on experience with SIEM, IDS or other security-monitoring platforms.
• Experience in incident investigation, vulnerability analysis or response playbooks.

Responsabilidades

• Perform cybersecurity monitoring and security operations for connected vehicles, cloud platforms and backend services in Europe.
• Monitor abnormal cybersecurity behaviours and identify threats, investigating vehicle-related alerts and incidents.
• Conduct alert triage, incident investigation, root-cause analysis and follow-up actions to closure.
• Develop, maintain and optimize SIEM/IDS detection rules and security use cases.
• Improve detection coverage, playbooks and monitoring processes.
• Support threat hunting, vulnerability analysis and continuous improvement of monitoring.
• Establish local processes and reporting for European vehicle cybersecurity operations.
• Ensure secure operation of connected vehicle services in line with ISO/SAE 21434 and GDPR.

Conocimientos

Cybersecurity operations

SOC

Incident response

Threat hunting

Communication skills

Educación

Bachelor's degree in Computer Science or related field

Herramientas

SIEM

IDS

Descripción del empleo

On behalf of a leading global automotive OEM, we are looking for a Vehicle Security Operations Engineer to join its European R&D organization in Barcelona.

This role is responsible for the local cybersecurity operations of connected vehicles, cloud platforms and backend services across the European market. You will monitor and investigate security events, optimize detection capabilities and coordinate with global headquarters, European teams and external partners to ensure incidents are handled effectively and brought to full closure.

Key Responsibilities

• Perform cybersecurity monitoring and security operations for connected vehicles, cloud platforms and backend services in Europe.
• Monitor abnormal cybersecurity behaviours, attack patterns and potential threats, identifying and investigating vehicle-related alerts and incidents.
• Conduct alert triage, incident investigation, root-cause analysis and follow-up actions, driving identified issues through to effective closure.
• Develop, maintain and optimize SIEM/IDS detection rules, correlation rules and vehicle-security use cases.
• Improve VSOC detection coverage, incident-response playbooks, monitoring processes and security automation capabilities.
• Support proactive threat hunting, vulnerability analysis and continuous improvement of security monitoring.
• Establish local processes, operating standards and reporting mechanisms for European vehicle cybersecurity operations.
• Support the secure and compliant operation of connected vehicle services in accordance with ISO/SAE 21434, UNECE R155/R156, GDPR and other relevant European requirements.
• Collaborate with headquarters, European engineering teams, Product, Quality, Aftersales, Operations, Tier 1 suppliers and technical service providers.
• Prepare incident reports, technical analyses, operational records and decision-support materials.

Requirements

• Bachelor's degree or above in Computer Science, Cybersecurity, Communications Engineering or a related field.
• At least 3 years of professional experience in cybersecurity operations, SOC, incident response, detection engineering or a closely related area.
• Hands-on experience with SIEM, IDS or other security-monitoring and threat-detection platforms.
• Experience in security alert analysis, incident investigation, vulnerability analysis, threat hunting or response playbook development.
• Ability to manage the complete issue lifecycle, from identification and escalation through investigation, remediation, verification and closure.
• Automotive cybersecurity, connected vehicle, telematics, IoT, OEM or Tier 1 experience is strongly preferred.
• Knowledge of ISO/SAE 21434, UNECE R155/R156, CSMS, GDPR or European connected vehicle regulations is highly desirable.
• Experience supporting the overseas implementation or operation of connected vehicle services is preferred.
• English must both be usable as working languages.
• Spanish or another European language is an advantage.
• Strong cross-functional and cross-cultural communication skills, with the ability to coordinate effectively between global headquarters and European local teams.
• Willingness to undertake occasional business travel.

Preferred Backgrounds

We particularly welcome candidates with experience in Vehicle SOC/VSOC, Automotive CSIRT or PSIRT, connected vehicle security operations, automotive incident response, detection engineering or automotive cloud security.