Incident Response Lead — SOC Automation

Lucid Motors; Newark (CA); On-site; USD 142,000 - 209,000; Full time

Job summary

Lucid Motors seeks an experienced Cyber Incident Response Security Engineer to join the global security team in Newark, CA. This role serves as the escalation point for the 24/7 SOC and drives automation, orchestration, and enhanced incident response capabilities.

You will lead investigations into malware, intrusions, and insider threats while shaping containment and remediation strategies. Responsibilities include developing detection rules, refining playbooks, and integrating SIEM/SOAR tools.

Qualifications

• 8+ years in Threat Detection/Response, Incident Response, or SOC Operations.
• Experience investigating malware, phishing, insider threats and APTs.
• Hands-on with CrowdStrike, Palo Alto, Netskope, Wiz, Splunk.
• Leading Insider Threat investigations and confidential inquiries.
• Proficient in SIEM, SOAR, and threat intel integration.
• Scripting to enable automation and detections (Python/PowerShell/Bash).
• Familiar with MITRE ATT&CK and cyber kill chain concepts.
• Cloud experience in AWS or similar environments.

Responsibilities

• Serve as senior escalation point for high-impact incidents (Level 3) in global 24/7 SOC.
• Lead advanced investigations into malware outbreaks and targeted intrusions.
• Provide containment, eradication, and remediation guidance to minimize risk.
• Proactive threat hunting using intelligence-driven analytics to detect activity.
• Develop and optimize detection rules and signatures for better visibility.
• Analyze threats from global intelligence sources and translate to defenses.
• Architect automated workflows to improve triage and response efficiency.
• Operate SOAR to orchestrate end-to-end response and reduce MTTR.
• Integrate SIEM technologies for log ingestion and alerting with low false positives.
• Collaborate with security engineering to enhance detection and controls.

Skills

Threat Detection

Incident Response

SOC Operations

Malware Analysis

Threat Hunting

Automation Scripting

Python

PowerShell

Cloud AWS

MITRE ATT&CK

Tools

CrowdStrike

Palo Alto FW

Netskope

Wiz

Splunk

Job description

Lucid Motors seeks an experienced Cyber Incident Response Security Engineer to join the global security team in Newark, CA. This role serves as the escalation point for the 24/7 SOC and drives automation, orchestration, and enhanced incident response capabilities.

You will lead investigations into malware, intrusions, and insider threats while shaping containment and remediation strategies. Responsibilities include developing detection rules, refining playbooks, and integrating SIEM/SOAR tools.