REQ ID: 118604
JOB TITLE: Senior VSOC Analyst
SALARY: Competitive
POSTING END DATE: 06/10/2023
LOCATION: Manchester

JLR is harnessing technology to make driving smarter, safer and cleaner. You can help create a world in which responsible, sustainable vehicles revolutionise the driving experience for generations. Our vision is to leverage the incredible potential of technology to build vehicles that not only offer a premium, all-encompassing digital experience, but that also make our customers lives better.

WHAT TO EXPECT

Today we are the largest investor in automotive research and development in the UK. Which means we want even more passionate minds that can think beyond, pushing the boundaries of what our industry deems possible.

JLR has long pushed the boundaries of technology. Now digital innovation lies at the heart of our business – because it is central to our future strategy. We are focused on the development of electric, connected and driverless cars that will reshape the whole industry. Joining us is your chance to help redefine who we are and where we’re going. Get ready to dream for tomorrow.

You will help develop collaborative and agile Vehicle Cyber Operations processes as part of a multi-disciplined team to deliver best in class digital solutions to meet our customer expectations. This role provides a unique opportunity to support and grow a new innovative capability within JLR

Reporting to the Cyber Security Chapter Lead and working cross-functionally across the Product Engineering space. You will have the opportunity to work on a range of projects alongside experienced engineers

You will:

• Analyse and report on security events, notifications or alerts escalated from operational support assets at Tier 1 and Tier 2.
• Monitor, analyse and investigate anomalous events as detected by various data feeds.
• Contribute to the development and improvement of Cyber Ops playbooks for use with operational support teams.
• Communicate recommended mitigating actions as part of the incident response process
• Perform post incident lessons learned and root cause analysis
• Reporting on security events in periodic summative intelligence reporting.
• Lead cyber security incident response engagements covering incident handling and coordination, in-depth technical analysis and investigation through to recovery.
• Identify patterns and behaviours related to threat actors and propose improvements to detection and protection capabilities.
• Support and mentor team members, and the wider DevSecOps community in JLR to drive continual improvement in threat response and incident management.

WHAT YOU’LL NEED

Essential:

• End to end understanding of attack frameworks such as MITRE and the Cyber Kill Chain
• Ability to conceptualise and articulate security threats of an integrated IT/OT environment.
• Experience of working within an agile delivery environment and/or DevOps techniques and practices
• Previous experience of AWS, or other major cloud service providers.
• Ability to provide technical mentorship to security team & DevOps community members.
• Understand intelligence-led threat hunting
• Support security content generation in signature detection and identify opportunities for autonomous improvements in partnership with the JLR’s DevSecOps Security Engineering squads.

SO WHY US?

Bring all this to the home of premium innovation, and you’ll find the opportunities to further your career with a world-class team, a discounted car purchase and lease scheme for you and your family, membership of a competitive pension plan and performance related bonus scheme. All this and more makes JLR the perfect place to continue your journey.

This role may offer the opportunity for hybrid working where you can split your time between working from home and in the office. At JLR, hybrid working is a voluntary, non-contractual arrangement providing employees with more choice and flexibility around how, when and where they work, if suitable for their role. Further details can be discussed with the Hiring Manager at interview stage.

Please be aware that we may close this vacancy for applications before the stated deadline if we receive a high volume of interest. We strongly advise you to submit your application as early as possible.

JLR is committed to equal opportunity for all.