SecOps Engineer II

About the Company

At Torc, we have always believed that autonomous vehicle technology will transform how we travel, move freight, and do business. A leader in autonomous driving since 2007, Torc has spent over a decade commercializing our solutions with experienced partners. Now a part of the Daimler family, we are focused solely on developing software for automated trucks to transform how the world moves freight.

Join us and catapult your career with the company that helped pioneer autonomous technology, and the first AV software company with the vision to partner directly with a truck manufacturer.

Join our growing Cybersecurity Team under our new Enterprise IT leadership. This team is responsible for developing a strategic security and risk management program, implementing security policies and procedures, and managing security technologies. As Torc continues to pave the way for the commercialization of autonomous trucking, this team will be instrumental in ensuring the security and trustworthiness of our systems.

The Sec Ops Engineer role offers a unique opportunity to work on the forefront of cybersecurity, contributing to the protection of our global organization and its stakeholders. As a Sec Ops Engineer, you will play a crucial role in identifying, analyzing, and mitigating security vulnerabilities within our systems and infrastructure. You will collaborate with cross-functional teams to continuously improve the Sec Ops tooling and incident response procedures, ensuring the resilience and security of our technology ecosystem.

• Manage the Sec Ops infrastructure to identify and mitigate threats to Torc systems.
• Produce valuable metrics and reports that show trends, tuning opportunities, and highlight potential new threats to system security.
• Collaborate with other Torc engineering teams to understand use cases and minimize false positives.
• Work closely with IT to understand the enterprise architecture and future plans for development. Make sure Sec Ops is prepared to adapt as our infrastructure evolves.
• Coordinate an on-call system that allows us to rotate responsibility for responding to off-hours escalations.
• Create and maintain the complete incident response plan, which includes the main policy, user procedures, and team runbooks.
• Work closely with IT to develop a vulnerability management system that provides identification of threats on a regular cadence along with prioritization for remediation.
• Develop and implement strategies for deploying patches and updates to address vulnerabilities in a timely manner.
• Maintain accurate and up-to-date documentation related to vulnerabilities, risk assessments, and remediation activities.
• Establish and maintain continuous monitoring mechanisms for vulnerabilities and provide regular reports to management and stakeholders.
• Stay informed about the latest security trends, vulnerabilities, and industry best practices to continuously improve the organization's security posture.

• Demonstrates competencies and skills typically achieved through the completion of a bachelor’s degree in Cybersecurity, Information Technology, or a related field.
• Proven experience (3-5 years) in software engineering with focus on vulnerability management, risk assessment, and remediation.
• In-depth knowledge of common vulnerabilities and exposure (CVE) databases, vulnerability scanning tools, and penetration testing methodologies.
• Familiarity with security frameworks and standards such as ISO 27001, NIST, or CIS.
• Strong scripting skills (Python, Power Shell, etc.) for automation of vulnerability management processes.
• Excellent communication and collaboration skills to work effectively with cross-functional teams.
• Keen attention to detail to identify problems and processes that don’t comply with protocol.
• Critical/logical thinking to identify problems and provide solutions to ensure cybersecurity solutions move us towards an efficient, cybersecure self-driving truck.

• Familiarity with AWS Cloud technology

Torc cares about our team members and we strive to provide benefits and resources to…