Role Description Reporting to the Senior Director of Vehicle and Connected Cybersecurity, this position plays a critical role in shaping cybersecurity architecture, influencing platform decisions, mentoring technical teams, and representing the organization with regulatory authorities, business partners, and industry forums. - Technical Leadership & Strategy - Act as the principal technical authority for vehicle, embedded, and connected cybersecurity across all vehicle programs and platforms. - Define and evolve cybersecurity architectures and technical standards for ECUs, in-vehicle networks, OTA, cloud backends, mobile apps, and V2X ecosystems. - Provide expert guidance on secure-by-design principles and emerging threats affecting automotive and connected systems. - Product & Engineering Engagement - Partner with vehicle, software, and systems engineering teams to integrate cybersecurity requirements throughout the product development lifecycle. - Lead or support threat modeling, risk assessments, and security architecture reviews for vehicle platforms and connected services. - Influence design decisions to balance security, safety, performance, cost, and customer experience. - Governance, Risk & Compliance - Support compliance with automotive cybersecurity standards and regulations (e.g., ISO/SAE 21434, UNECE R155/R156, NIST). - Provide technical input for cybersecurity policies, processes, and audit readiness. - Advise leadership on cybersecurity risk posture, residual risks, and mitigation strategies. - Incident Response & Vulnerability Management - Serve as a senior technical advisor during cybersecurity incidents affecting vehicles or connected services. - Guide root cause analysis, remediation strategies, and long-term corrective actions. - Oversee vulnerability disclosure, penetration testing findings, and coordinated response activities. - Industry & External Engagement - Represent the company in industry working groups, standards bodies, and technical forums. - Engage with suppliers and technology partners to assess cybersecurity capabilities and risks. - Monitor emerging threats, technologies, and regulatory trends impacting automotive cybersecurity. - Mentorship & Knowledge Development - Mentor and develop cybersecurity engineers and specialists across the organization. - Elevate overall cybersecurity maturity through knowledge sharing, best practices, and technical reviews. Qualifications - Bachelor’s degree in Computer Science, Electrical Engineering, Cybersecurity, or a related field (Master’s preferred). - 10+ years of experience in cybersecurity, with significant focus on embedded, automotive, or IoT systems. - Deep technical expertise in areas such as embedded security, secure boot, cryptography, PKI, in-vehicle networks (CAN, LIN, FlexRay, Ethernet), OTA updates, and cloud-connected systems. - Strong understanding of automotive cybersecurity standards and regulatory frameworks. - Proven ability to influence technical decisions across multiple teams without direct authority. Preferred Qualifications - Experience working at or with an automotive OEM or Tier 1 supplier. - Familiarity with functional safety (ISO 26262) and its interaction with cybersecurity. - Hands-on experience with threat modeling methodologies and security architecture design. - Professional certifications (e.g., CISSP, CISM, CSSLP, GIAC) are a plus. Key Competencies - Strategic and systems-level thinking. - Deep technical credibility and problem-solving ability. - Strong communication skills for both technical and executive audiences. - Ability to navigate complex, matrixed organizations. - High integrity and commitment to safety and customer trust. Benefits - Immediate medical, dental, vision and prescription drug coverage. - Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more. - Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more. - Vehicle discount program for employees and family members and management leases. - Tuition assistance. - Established and active employee resource groups. - Paid time off for individual and team community service. - A generous schedule of paid holidays, including the week between Christmas and New Year’s Day. - Paid time off and the option to purchase additional vacation time.

• Act as the primary Armis SME for laboratory environments • Configure, tune, and maintain Armis policies, alerts, and device classifications • Improve risk scoring models and detection logic to reduce false positives • Maintain accurate inventory of lab/OT/IoT devices • Collaborate on risk mitigation and remediation strategies • Define and maintain security policies and SOPs for lab environments • Configure and manage alerts for anomalies and threats • Investigate and triage incidents using Armis and related tools • Support incident response activities , including containment and recovery • Work closely with scientists and lab teams to align security with workflows • Deliver training and awareness sessions on secure usage of lab devices

• Own the vulnerability management lifecycle and operating model: asset discovery, authenticated scanning, validation/triage, risk-based prioritization, remediation tracking, and exception handling • Administer and tune vulnerability scanning tools (e.g., Tenable/Qualys/Rapid7), including scan policies, schedules, credentials, coverage monitoring, and false-positive reduction • Maintain accurate vulnerability scope by partnering with IT and outsourced IT to improve inventory/CMDB data, ownership, tagging, and coverage for servers, endpoints, network devices, and cloud resources • Drive remediation with system owners by translating technical findings into actionable tickets, validating fixes, and escalating overdue/high-risk items based on defined SLAs • Define vulnerability remediation standards (severity definitions, SLAs, exception criteria) and manage the risk acceptance/exception process with appropriate approvals and audit-ready evidence • Coordinate patch and configuration remediation activities with internal IT and outsourced IT, including maintenance windows, validation scans, and change control documentation • Produce executive-ready risk reporting and program metrics (dashboards/scorecards); communicate trends, exposure drivers, and remediation performance to leadership and technical teams • Support secure configuration and hardening efforts by aligning remediation guidance to recognized standards (e.g., CIS Benchmarks, vendor guidance) and validating compliance via scanning and spot checks • Coordinate external penetration tests and vulnerability assessments; intake findings, assist with remediation plans, and track closure through retesting • Perform vulnerability validation and prioritization, including exploitability context (e.g., KEV/exploit intel), business criticality, and exposure (internet-facing, privilege level, lateral movement) • Lead rapid exposure assessments and remediation coordination for emerging threats (e.g., zero-days, CISA KEV additions), including stakeholder communications and mitigation tracking • Partner with Security Operations (SOC) and Incident Response to perform rapid exposure assessments during emerging threats and support containment/mitigation actions as needed • Manage vulnerability-related tickets/workflows in the organization’s service management platform (e.g., ServiceNow/Jira), including SLA tracking, evidence collection, and audit-ready documentation • Lead continuous improvement for vulnerability management, including automation, coverage expansion, authenticated scanning maturity, and integrations with patching/endpoint management, CMDB, and ticketing systems • Provide security oversight and governance for outsourced IT/MSP vulnerability remediation deliverables (patching, endpoint protection, scanning credential management, hardening), including KPI/SLA review, quality assurance, and escalations • Lead vendor and outsourced IT coordination to ensure timely remediation and accurate reporting; define expectations, participate in QBRs, and manage escalations for recurring security gaps • Own and improve Microsoft 365 security and identity controls relevant to vulnerability reduction (e.g., Entra ID, Conditional Access, MFA, privileged access/secure admin practices, security baselines) in coordination with IT • Own Proofpoint email security configuration and tuning for Office 365/Exchange Online mail flow (e.g., anti-spam/anti-malware, URL defense, attachment sandboxing, anti-phishing/BEC protection), including incident-driven rule updates, metrics/reporting, and continuous reduction of false positives/negatives

• Lead and coordinate SOC analysts during assigned shift, ensuring adherence to procedures and performance expectations. • Serve as the first line of escalation for high-priority or complex security incidents. • Oversee real-time monitoring, analysis, and triage of security alerts from various security platforms. • Validate and ensure completeness, accuracy, and consistency of incident documentation and ticketing. • Enforce adherence to playbooks, runbooks, and service level agreements (SLAs). • Provide shift handoff summaries and briefings to incoming teams and SOC leadership. • Mentor and coach team members to drive continuous skill development and career progression. • Assist with onboarding of new analysts and ensure proper access to customer environments. • Participate in operational planning and post-incident reviews to identify improvements. • Collaborate across internal teams to support customer onboarding, tuning, and custom configurations. • Maintain awareness of emerging threats, vulnerabilities, and security technologies.