Cybersecurity Incident Response Tech Lead

Are you the kind of person who is passionate about cybersecurity both process and product implementation? Would you like to use your passion in the automotive industry and be part of the cybersecurity vehicle type approval? Would you like to work in a great team with competent and helpful colleagues?


The Team


Our team, “Product Cybersecurity Management System (PCSMS)” is in the heart of a great transformation. We work with developing and improving our product cybersecurity management system (PCSMS) in a continues manner along with coordinating the Cybersecurity work according to R155 and ISO/SAE 21434 along all teams within Volvo Group Truck Technology (GTT), we also supporting teams to do high level attack vector analysis and vehicle TARA analysis to facilitate releasing work products according to state of the arts.


As part of our continuous improvement effort, we are looking for qualified Cybersecurity Incident Response Tech. Lead to join our innovative, high-energy team. In this role you will lead the Incident Response Team to respond to security events, conduct analysis of threats such as malware and intrusion attempts, and provide security services to safeguard highly sensitive data as well as work hands-on with detection systems and vulnerability analysis tools to respond to potential threats to our products.


The main responsibilities entailed in this role are:
Continuously monitor threats and risks to the vehicle product especially post SOP until End-of-Life
Secure early detection of cybersecurity issues through analysis of vehicle security data and CTI
SOC and VSOC monitoring
Perform controlled simulated attacks on systems to evaluate their security defences and identify areas for improvement.
Identify and manage vulnerabilities and provides lessons learned to further development projects
Defines thresholds on which a cybersecurity event will be triggered
Coordinates investigation of the technical impact, the scale of the technical impact, and other technical analyses
Identifies, analyze, and remediates cybersecurity events and incidents
Conducts initial technical analysis resulting in a confirmation or rejection of the event as a PCS incident
Conducts classification of a confirmed PCS incident to indicate its impact, urgency, and prioritisation.
Triggers and follows-up short-term solution development and implementation from the technical side
Supports long-term solution decisions and actions from a technical perspective
Coordinates communication with internal technical stakeholders
Supports the update of the PCS Incident Response Report
Drives the post-incident review activities
Manages the cybersecurity risk methodology used in the TARA
Manages the cybersecurity aspects of tools that can impact the cybersecurity risks on the vehicle
Lead the team and coach/mentor other in the team.

Who are you!
As a person, you have a holistic view, out of the box mindset, broad technical know-how combined with very good people skills and a strong belief in agile methods. You have a strong ability to inspire, develop and motivate individuals and teams.


You are unique individuals prepared to relentlessly resolve security issues by gathering and analyzing event data and conducting root-cause analysis. We value broad and deep technical knowledge, specifically in the fields of forensics, malware analysis, network security, application security, threat hunting, and threat intelligence.


Required qualifications:
MSc. in Computer Science, Cybersecurity, System engineering
Extensive experience (8+ years) and best practice understanding in the field of automotive cyber security, including risk management, incident response, and security vulnerability management, CTI, VSO
Cybersecurity verification and validation and Hacking knowledge is a plus
Experiences in TARA analysis
Knowledge of ISO 21434 and R155 is a plus
Knowledge of automotive and embedded system engineering
Technical depth in conducting penetration testing, vulnerability assessments, and security audits to identify and address potential vulnerabilities, digital forensic, malware analysis, threat hunting, etc
Understanding of attacker exploit techniques and their remediation
Experiences in tool set up
Proficiency in data analysis
Ability to work with high degree of autonomy
Hands on by scripting and previous experience of onboard and offboard technologies within intrusion detection, network security controls and threat intelligence
Excellent leadership and communication skills, with the ability to effectively collaborate with cross-functional teams and communicate complex security concepts to both technical and non-technical stakeholders.

Are we the perfect match?
This position offers an opportunity to work in a global and multicultural work environment. Furthermore, this position offers possibilities of not only interacting with our experts and engineers across different organizations within the Volvo Group but also networking and collaborating with academia, research institutes and other industrial entities.

Curious, and have some questions? Reach out to us!

We will gladly give you more information about the role and how we can help each other on our future journey! Dont hesitate, contact Zhafira Magnfält, Group Manager Cybersecurity Team. Email: zhafira.magnfalt@volvo.com

Kindly note that due to GDPR, we will not accept applications via mail. Please use our career site.