ACV is a technology company revolutionizing the automotive industry by building the most trusted and efficient digital marketplace for sourcing, selling, and managing used vehicles with transparency and data-driven insights. We are seeking a highly motivated and experienced Threat Detection and Response (TDR) Engineer to build our Security Operations Center (SOC) and incident response capabilities. This critical leadership role is responsible for protecting our SaaS platform, customer data, and the integrity of our wholesale automotive auction environment, ensuring the confidentiality, integrity, and availability of our systems and data to maintain trust within the automotive wholesale marketplace.
Responsibilities
- Lead all security investigations, incident coordination, and management related to security events.
- Develop, implement, and maintain a world-class Incident Response Policy, Process, and Procedure aligned with industry best practices (NIST, SANS) and relevant compliance requirements, specifically considering the sensitivity of financial transactions and vehicle data within the automotive wholesale space.
- Design, implement, and maintain a robust Security Information and Event Monitoring (SIEM) system, integrating logs and events across our multi-tiered infrastructure.
- Develop and maintain a multi-year roadmap for SIEM enhancements and capabilities to proactively identify and respond to emerging threats.
- Oversee the complete build and ongoing operations of a follow-the-sun Security Operations Center (SOC) tailored to ACV Auctions’ specific requirements and risk profile.
- Manage alert prioritization, investigation, and escalation processes, while ensuring optimal performance and efficiency.
- Lead the development and implementation of Security Orchestration, Automation, and Response (SOAR) workflows to automate repetitive tasks, improve response times, and enhance overall SOC efficiency.
- Identify, prioritize, and implement key automation opportunities on a regular basis.
- Develop and champion a comprehensive Detection and Response (TDR) program for the enterprise.
- Create and execute regular tabletop exercises and security testing activities to validate security controls, identify gaps, and improve security awareness across the organization, particularly around phishing and social engineering targeting our auction platform users.
- Act as a security champion and mentor within the organization.
- Provide security operational leadership, proactively communicate security risks and best practices, and collaborate effectively with cross-functional teams (Engineering, Product, Operations, Compliance) to integrate security into all aspects of our business.
- "Sell" the importance of security throughout the organization and ensure buy-in from key stakeholders.
- Stay abreast of relevant regulatory requirements (e.g., PCI DSS, GDPR, CCPA, data security standards specific to the automotive industry) and ensure our security practices align with these standards.
- Contribute to risk assessments and mitigation efforts.
Requirements
- 8+ years’ experience
- Minimum of a 4 year Bachelor’s degree
- Ability to read, write, speak and understand English.
- Excellent communication, interpersonal and leadership skills, with the ability to interact with staff at all levels.
- Knowledge of CASB, DLP and SASE technologies
- Proven ability to be agile and work effectively in a dynamic environment.
- Demonstrated ability to perform under pressure and respond rapidly to emerging incidents and situations.
- Excellent coordination, project management, and organization skills and comfortable with multi-tasking in a high-energy environment.
- Creative and analytical problem solver with a passion to provide excellent customer service.
- Practical hands-on experience engineering and implementing data security controls in cloud environments including databases, datastores and SaaS platforms.
- Linux and Kubernetes/Container management and security
- DevOps code based implementation and management
- Knowledge of AWS including but not limited to S3, Lambda, RDS, EC2 and AWS Security Center
- Understanding of TCP/IP Networking including knowledge of Protocols and Services
- Understanding of what Information or Assets are of value to Threat Actors and how Organizations are Breached and Customer Accounts Compromised.
- Overall understanding of the Security domain, compliance, business, risk, ops etc ALONG with its application to the business.
Benefits
- Competitive compensation packages
- Learning and development opportunities
- Industry leading benefits and wellness programs supporting Health, Physical, Financial, Social and Emotional Wellness
Additional details
- ACV is a technology company that has revolutionized how dealers buy and sell cars online, transforming the automotive industry with innovation and user-designed, data-driven applications and solutions.
- Our network of brands include ACV Auctions, ACV Transportation, ClearCar, MAX Digital and ACV Capital within its Marketplace Products, as well as, True360 and Data Services.
- ACV Auctions in Chennai, India are looking for talented individuals to join our team, offering a wide range of exciting opportunities across various roles in corporate, operations, and product and technology.
- Our global product and technology organization spans product management, engineering, data science, machine learning, DevOps and program leadership.
- What unites us is a deep sense of customer centricity, calm persistence in solving hard problems, and a shared passion for innovation.
- ACV is committed to an inclusive culture in which every individual is welcomed and empowered to celebrate their true selves, fostering a work environment of acceptance and understanding that is free from discrimination.
- ACV is committed to being an equal opportunity employer regardless of sex, race, creed, color, religion, marital status, national origin, age, pregnancy, sexual orientation, gender, gender identity, gender expression, genetic information, disability, military status, status as a veteran, or any other protected characteristic.
- We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.
- If you have a disability or special need that requires reasonable accommodation, please let us know.
- When you apply to a job on this site, the personal data contained in your application will be collected by ACV Auctions Inc. and/or one of its subsidiaries ("ACV Auctions"). By clicking "apply", you hereby provide your consent to ACV Auctions and/or its authorized agents to collect and process your personal data for purpose of your recruitment at ACV Auctions and processing your job application.
- ACV Auctions may use services provided by a third party service provider to help manage its recruitment and hiring process.
- For more information about how your personal data will be processed by ACV Auctions and any rights you may have, please review ACV Auctions' candidate privacy notice here.
- If you have any questions about our privacy practices, please contact datasubjectrights@acvauctions.com.
- Our Values: Trust & Transparency | People First | Positive Experiences | Calm Persistence | Never Settling
Zobhira
