Vehicle Cyber Security Expert

DescriptionYour mission is to protect our organization against digital threats together with your colleagues.Department
We need to comply with upcoming UN-ECU cybersecurity regulations R155 and R156. These regulations set high demands to the security level of our vehicles and its related services as well as all processes required to assure that the vehicles and services remains adequately secured during its economic lifetime. Official instances will evaluate compliance which is related to the type approval of the vehicles.

ComplexityEnterprise IT infrastructure is structured in a fairly simple configuration; it is composed of endpoints (desktops), network, servers, gateway and perimeter devices. Mobility requires a more sophisticated infrastructure, including proprietary command and control (C+C) telematics servers, moving cars, cloud layer(s), machines, sensors, mobile applications and other components, making it more complicated to manage and monitor. Due to the further professionalization of our organization, we need a VSOC (Vehicle Security Operations Centre) Cyber Security Expert.

Your work is diverse and includes

• Making necessary changes to improve processes and VSOC systems to gain strength in Cyber Security;
• (Coordination of) substantive further advise on making our VSOC stronger and future prove;
• Dashboarding and periodic reports;
• Expansion of existing monitoring, including further design of the Security Information & Event Management System (SIEM);
• Advising on the further development of the VSOC, with an important focus on new techniques;
• If necessary, participate in project groups/scrum teams to contribute to broader PACCAR IT projects based on your expertise.Requirements
• You have University working and thinking level;
• Relevant Vehicle and Cyber Security experience (5 years+ experience);
• Relevant management experience, preferably managing a (V)SOC (3 years+ experience);
• You have extensive experience with the substantive activities of a (V)SOC;
• Using and expanding a SIEM, IDS and other commonly used security tooling holds no secrets for you;
• Knowledge of different protocols such as:o Telematics , proprietary protocols, different versions per car modelo OTA software updateso Consumer mobile app – connected to the car remotely
  o Vehicle APIs (as in vehicle delivery)o Mobility services and applications (like car sharing)o In-vehicle sensors and security