Manager, Automotive Product SOC

Ford • Dearborn, MI

1d • $132,800 - $250,800 • Hybrid

About The Position

This leadership role within the Vehicle and Connected Cybersecurity organization is responsible for leading operational monitoring and incident response for connected vehicle and cloud environments. You will lead a specialized team of Product Security Operations Center (PSOC) cybersecurity professionals in triaging alerts, coordinating investigations, and driving timely resolution across vehicle telematics, embedded systems, and cloud-native application stacks. Reporting to the Director of Monitoring and Threat Hunting, this role focuses on incident management, driving issue closure, and continuously improving Ford's monitoring processes and detection capabilities. As a peer to the Monitoring Global Team, you share equal ownership of Ford's day-to-day monitoring mission and its follow-the-sun operating model. You will partner across cloud, vehicle, and enterprise teams to ensure rapid, effective problem resolution for connected vehicles and the cloud services that power them.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or Engineering, or related field OR a combination of education and experience.
• 5+ years in cybersecurity including experience leading SOC, incident response, or security operations teams.
• Deep understanding of incident response lifecycles, escalation management, and incident management practices.
• Hands-on experience with cloud security operations on one or more major cloud platforms, including logging, monitoring, identity, and response workflows.
• Experience investigating and responding to incidents in hybrid environments spanning cloud services, enterprise IT, and connected/embedded systems.
• Experience partnering with engineering and infrastructure teams to triage, contain, and remediate production-impacting issues.
• Proven ability to manage high-pressure security incidents, mentor technical teams, and communicate clearly with senior leadership.

Nice To Haves

• Master’s degree preferred
• 2+ years of people leadership or program leadership in SOC, cloud operations, or security engineering environments.
• Prior experience leading teams in 24x7 operations, including shift handoff, incident prioritization, and operational readiness.
• Familiarity with detecting and investigating threats across cloud and vehicle telemetry data, including log correlation and alert tuning.
• Technical understanding of embedded or automotive environments and the security considerations of cloud architecture.
• Background in building, refining, or operationalizing runbooks, playbooks, and escalation procedures at scale.
• Relevant certifications such as CISSP, CISM, GIAC, or cloud security certifications across AWS, Azure, or GCP.
• Ability to turn incidents into platform, process, or detection improvements.

Responsibilities

• Direct daily PSOC operations including alert triage, incident coordination, containment, remediation, recovery, and closure.
• Lead investigations of security events across cloud application stacks and embedded vehicle architectures using available logging and telemetry.
• Lead, mentor, and develop an established team of analysts, managing shift structure and operational readiness.
• Partner with the Monitoring Global team to sustain seamless follow-the-sun coverage, consistent standards, and robust cross-region handoff.
• Provide structured feedback to the Monitoring Development team to identify friction points and improve detection logic, tooling, and response workflows.
• Collaborate closely with the Cyber Incident Response Team (CIRT), Product Development, and Enterprise IT to execute response playbooks and coordinate complex mitigations.

Benefits

• Immediate medical, dental, vision and prescription drug coverage
• Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up childcare and more
• Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more
• Vehicle discount program for employees and family members and management leases
• Tuition assistance
• Established and active employee resource groups
• Paid time off for individual and team community service
• A generous schedule of paid holidays, including the week between Christmas and New Year’s Day
• Paid time off and the option to purchase additional vacation time.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager