Vehicle SOC Manager

Riyadh2w ago

About the role

<div class="content-intro">About Lucid At Lucid, we are creating exceptional mobility experiences through innovation to drive the world forward. Built on Lucid’s proprietary technology and software-defined vehicle architecture, our award-winning vehicles bring our “Compromise Nothing™” approach to the global automotive market. That means refusing to choose between performance and sustainability, design and engineering, ambition and integrity. In Lucid Air and Lucid Gravity, we have designed and built vehicles that have redefined their segments, combining exceptional range, performance, design, and expansive space in a single experience.  We achieve this through deep vertical integration, with design, engineering, and production happening in-house across our global offices and manufacturing facilities. Our teams come from industries around the world, united by a shared commitment to excellence. By refusing to settle, you can help redefine what’s possible and shape the future of mobility.</div>Role Summary We are seeking a Lead SOC Validation & Adversary Simulation Engineer to strengthen the effectiveness of our Security Operations Center (SOC / VSOC) by continuously validating detections, response workflows, and telemetry using adversary-informed testing techniques. This role is SOC-owned and SOC-driven. The primary objective is to improve detection fidelity, reduce blind spots, and increase SOC readiness across vehicle, cloud, and other environments. Adversary simulation and Purple Team techniques are used as methods to harden SOC operations not as standalone Red Team activities. Key Responsibilities <ol> <li>SOC Detection Validation & Assurance (Primary Focus)</li> </ol> <ol> <ul> <li>Own continuous validation of SOC detections across:</li> <ul> <li>Vehicle telemetry and in-vehicle IDS</li> <li>Telematics and backend services</li> <li>Cloud APIs, and other supporting systems</li> </ul> <li>Validate alerts against realistic attacker behavior, not synthetic rules</li> <li>Identify:</li> <ul> <li>Detection gaps</li> <li>Signal quality issues</li> <li>Excessive false positives or low-value alerts</li> </ul> <li>Partner with SOC engineers to improve alert logic, correlation, and response playbooks</li> </ul> <li>Adversary Simulation in Support of SOC</li> <ul> <li>Design controlled adversary simulations to test SOC capabilities:</li> <ul> <li>API misuse and abuse</li> <li>Lateral movement</li> <li>Unauthorized diagnostics or ECU access</li> </ul> <li>Align scenarios to MITRE ATT&CK (Cloud API + Automotive)</li> <li>Coordinate with Red Team only when advanced exploitation is required</li> </ul> <li>SOC Telemetry & Signal Engineering</li> <ul> <li>Work with platform and product teams to:</li> <ul> <li>Improve log coverage and quality</li> <li>Define high-value security signals</li> <li>Reduce noisy or redundant telemetry</li> </ul> <li>Influence what gets logged, where, and why—from ECUs to cloud services</li> <li>Help SOC prioritize telemetry based on risk and detection value</li> </ul> <li>Incident Readiness & Response Validation</li> <ul> <li>Validate SOC incident response workflows through:</li> <ul> <li>Detection-driven exercises</li> <li>Tabletop scenarios informed by real attack paths</li> </ul> <li>Measure and improve:</li> <ul> <li>Mean Time to Detect (MTTD)</li> <li>Mean Time to Triage (MTTT)</li> <li>Mean Time to Respond (MTTR)</li> </ul> <li>Ensure SOC procedures align with real attack timelines</li> </ul> <li>Threat Modeling & Risk Alignment</li> <ul> <li>Leverage TARA / threat-modeling outputs to prioritize SOC coverage</li> <li>Ensure SOC monitoring aligns with:</li> <ul> <li>ISO/SAE 21434</li> <li>UNECE R155/R156</li> </ul> <li>Translate detection gaps into risk-based narratives for leadership and auditors</li> <li>Support audit evidence by demonstrating validated monitoring effectiveness</li> </ul> <li>Automation & Continuous SOC Validation</li> <ul> <li>Build or enhance SOC validation automation, including:</li> <ul> <li>Detection testing frameworks</li> <li>Alert replay and validation pipelines</li> <li>Coverage and maturity dashboards</li> </ul> <li>Integrate validation workflows into:</li> <ul> <li>SIEM</li> <li>SOAR</li> <li>CI/CD where applicable</li> </ul> <li>Reduce manual SOC testing and increase repeatability</li> </ul> <li>Metrics, Reporting & Leadership Communication</li> <ul> <li>Define SOC-focused KPIs such as:</li> <ul> <li>ATT&CK coverage by detection</li> <li>Detection efficacy over time</li> <li>Reduction in blind spots</li> </ul> <li>Produce clear SOC maturity and readiness reports</li> <li>Communicate findings to:</li> <ul> <li>SOC leadership</li> <li>Product security</li> <li>Engineering stakeholders</li> </ul> </ul> </ol> Required Qualifications Technical Experience <ul> <li>Cybersecurity with strong SOC, detection engineering, or incident response experience</li> <li>Deep understanding of:</li> <ul> <li>SOC operations and alert lifecycle</li> <li>Detection engineering and signal tuning</li> <li>Adversary techniques and kill chains</li> </ul> <li>Experience working with:</li> <ul> <li>SIEM and SOC tooling</li> <li>Cloud and API monitoring</li> <li>Network and system telemetry</li> </ul> <li>Strong scripting or automation skills (Python, Go, C)</li> </ul>   Leadership & Collaboration <ul> <li>Proven experience leading SOC improvement initiatives</li> <li>Ability to influence detection priorities across teams</li> <li>Strong written and verbal communication skills</li> <li>Comfortable presenting to leadership and auditors</li> </ul><div class="content-conclusion"><div> Compensation & Benefits: Lucid offers a comprehensive and competitive <a href="https://mylucidbenefits.com/">benefits package</a> including medical, dental, and vision insurance; life and disability coverage; paid time off; paid holidays; and a 401(k) retirement plan. Eligible employees may also participate in Lucid’s equity program and/or a discretionary annual cash incentive program. Incentive and equity awards, if applicable, are determined based on individual performance, role scope, market considerations, and overall company results, in accordance with the terms of the applicable plans.    Equal Opportunity: At Lucid, we believe diversity strengthens everything we build. Lucid Motors is proud to be an equal opportunity employer and is committed to providing an inclusive workplace for all. We consider all qualified applicants without regard to race, color, national or ethnic origin, age, religion, disability, sexual orientation, gender, gender identity or expression, marital status, or any other characteristic protected by applicable state or federal laws and regulations.    Accessibility: Lucid Motors is committed to providing reasonable accommodations for qualified individuals with disabilities. If you need any accommodation to participate in the application process, please contact us at <a href="mailto:TA-Operations@lucidmotors.com">TA-Operations@lucidmotors.com</a>.    Candidate Data Privacy: By submitting your application, you understand and agree that your personal data will be processed in accordance with our <a href="https://lucidmotors.com/media/document/candidate-privacy-notice.pdf">Candidate Privacy Notice</a>.    To all recruitment agencies: Lucid Motors does not accept agency resumes. Please do not forward resumes to Lucid Motors. Lucid Motors is not responsible for any fees related to unsolicited resumes.    </div></div>

Perks & benefits

401k
Vision Insurance
Paid Time Off
Equity Compensation

755,000+ hidden jobs like this

Lucid Motors and thousands of companies post here first — often days before LinkedIn or Indeed. Your first 5 applications are free; go Pro to apply without limits.

Everything Pro unlocks:

Unlimited applications — free stops at 5
Track every application in one place
Apply straight to the source, one click
Save & organize roles you love
Roles pulled from company boards before the big sites

Weekly

$9.99

$4.99/week

For an active search. Cancel anytime.

Get Weekly

Monthly

$24.99

$12.99/month

The smart pick. Save 35% vs weekly.

Get Monthly

Lifetime

$99

$49.99once

Pay once. Every future feature, forever.

Get Lifetime