Product Cybersecurity Operations Manager

SHAPE THE FUTURE OF MOBILITY FROM DAY ONE.

This position is part of our Corporate Functions.

Summary:

Help us protect Aptiv, our products and our customers from the most advanced threats affecting the automotive industry. Aptiv's Cybersecurity team breaks the mold of traditional internal security and focuses on active threats to Aptiv's products. Aptiv's Product Security Operations Center protects Aptiv product through monitoring, analyzing and responding to automotive and connected vehicle threats.

The Product Cybersecurity Operations Manager is responsible for the management of the threat intelligence and product incident response teams.

Responsibilities:

• Create and execute a strategy for team maturity against the PSIRT (Product Security Incident Response Team) FIRST (Forum of Incident Response and Security Teams) Framework, tailored for automotive product cybersecurity.
• Manage the Product Security Operations team in Troy Technical Center (TTC), including threat intel analysts and incident handlers
• Manage PSOC (Product Security Operations Center) budget, forecasting and strategic development investments
• Establish metrics and regular reporting mechanisms for measuring compliance and performance of vulnerability and incident response activities
• Support customer and supplier discussions on post-development cybersecurity support
• Continue to improve the processes, efficiency and quality of activities conducted by PSOC
• Identify opportunities for proactive threat hunting, developing relationships with law enforcement, intelligence communities, academia and other sources for understanding adversaries and cybersecurity research activities
• Improve threat intelligence through development of priority intelligence requirements, assessment and onboarding of additional threat intelligence sources
• Develop processes and implement tools and techniques to perform forensic analysis of Aptiv's product portfolio
• Support development of asset management system to increase visibility into product portfolio and improve incident response time
• Actively engage with the Automotive ISAC (Information Sharing and Analysis Center) membership, especially the Information Sharing Standing Committee and Analyst Working Groups.
• Maintain and enhance processes for supporting Secure Development Lifecycle
• Coordinate across cybersecurity functions for increased transparency across Automotive Red Team, Engineering, Governance and Product Development teams
• Keep current on industry security operations / incident response best practices and industry security risks

Required Qualifications:

• Degree in Computer Science, Engineering, or related discipline
• Knowledge of managing the entire lifecycle of vulnerabilities from discovery, triage, advising, remediation, and validation
• Knowledge of relevant industry standards and best practices, such as ISO/SAE 21434
• Experience with product development and the lifecycle of consumer-facing products, preferably automotive
• Excellent organization, communication, collaboration and interpersonal skills
• Ability to communicate and present complex issues and ideas with precision and clarity, adjusting appropriately for the audience; ability to communicate effectively at all levels of the organization

• High level of integrity in dealing with confidential and sensitive information
• Familiar with cybersecurity mitigations (encryption, certificate management, TLS, wireless communication protection, firewalls, etc.)

Aptiv Rewards and Advantages

• Competitive compensation with bonus potential
• Competitive health benefits
• 401K with matching contribution
• Learning and development opportunities
• Discount programs with various manufacturers and retailers
• Recognition for innovation and excellence
• Opportunities to give back to the community
• Meaningful work that makes a difference in the world

Privacy Notice - Active Candidates: https://www.aptiv.com/privacy-notice-active-candidates

Aptiv is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender identity, sexual orientation, disability status, protected veteran status or any other characteristic protected by law.