Senior SOC Specialist in Bucuresti

Push boundaries. Explore ideas. Reshape tomorrow. Join Garrett and grow your career while helping top vehicle brands accelerate towards a cleaner, safer, and smarter future.Garrett is the true pioneer of automotive turbocharging dating back more than 60 years and continues today as the world's leader in turbo technology solutions and an experienced supplier of electric boosting products and automotive software to support passenger cars, commercial vehicles and off-highway equipment. With a worldwide footprint of engineering centers, testing labs and manufacturing facilities, Garrett serves all major automotive companies to implement key differentiated technology offerings. Responsibility of this position to secure and identify cybersecurity threats for Garrett IT and Plant networks. Position is responsible to follow SOC Incident management process. Investigate and triage security events for cybersecurity intusions, data exfiltration and other cybersecurity incidents in the organization. Constantly understand threat intelligence sources and create detection and prevention controls to alert and mitigate the threats. Constantly update the event sources to provide comprehensive coverage of detection and preventive controls. Prioritize detection and response plan based on the impact to Garrett assets people, data assets, finance and brand image. Responsibilities:SOC Operations• Automate SOC monitoring and resolution for incidents reported;• Finetuning SIEM platform and use cases development to address emerging threats;• Co-ordinate with MSSP partner for key initiatives, enable and provide requirements and support delivery of projects;• Deploy robust incident response, forensics and threat intelligence processes;• Lead the delivery of incident management system enhancements and modifications;• Drive process improvements assisting to identify opportunities for positive change, improving SOC's overall detection and response capabilities.Threat Intelligence and Hunting• Gather threat intelligence from the industry and discern the applicable threats for our landscape; • Investigate the network systems or endpoints to identify threat patterns or indicate compromise and analyze the threat;• Coordinate with the IT and Plant IT team to resolve the cyber threats and prevent the same attack from recurring;• Analyzing and detecting cyber threats that affect business operations using threat intelligence.• Monitoring the security patterns to identify, isolate, and detect the threats before attackers tend to exploit them.• Planning, creating, and implementing security solutions for the organization.Incident Response• Lead incident response, including steps to minimize the impact and then conducting a technical and forensic investigation into how the breach happened and the extent of the damage;• Track security incident related KPIs and metrics, and assist with reporting on those metrics to senior management;• Define & Implement technology roadmap to mitigate threats across Endpoints & Network. YOU NEED:• Bachelor’s degree in Information Technology or related discipline;• Overall 10+ years of relevant IT / Cyber Security experience• Minimum 5+ years of technology experience in SOC including SIEM, End Point Detection & Response, Network Detection & Response, IDP and IDS, Email Security, SOC Operations and Incident Management • Demonstrated proficiency with the IT Security Common Body of Knowledge required for enabling security concepts on varied technology.• Expertise and demonstrated experience in SOC Incident management, SIEM, Endpoint security (EDR, Antivirus, etc), Network Security (Firewalls, Proxy, etc), BENEFITS Meal tickets 13th salary Private medical insurance A fixed monthly amount received on the Benefits platform with which you can choose from services such as: Extended health insurance for employees and dependents Dental care Online and offsite shopping discounts Private pension Vacation vouchers Transportation: Metrorex/STB monthly subscriptions or Fuel card Access to various events (paintball, escape room, laser tag, rafting, wakeboarding, movie, theater etc.) LEARN & DEVELOP Extensive online and on-site training programs Support for Green Belt Six Sigma Certification Peer2Peer Training program: learn and teach one another, offer advice, and engage Career growth & promotion opportunities International work environment RELAX & WELL-BEING Sports and Social Club: trainer in the Office program and weekly online Nutrition Sessions for all Garrett employees Friendly working environment, alongside talented and dedicated people Networking area Bookster Great coffee, tea and spices Weekly Fruit Day Employee assistance program for all our employees (professionals ready to listen and speak with you on all subjects) Flexible working hours 26 vacation days per year for all our employees Hybrid work environment: 2 days Work from Home per week