Staff SOC Manager - Aurora Technical Operations Center

Who we are

Aurora’s mission is to deliver the benefits of self-driving technology safely, quickly, and broadly.

The Aurora Driver will create a new era in mobility and logistics, one that will bring a safer, more efficient, and more accessible future to everyone.

 

At Aurora, you will tackle massively complex problems alongside other passionate, intelligent individuals, growing as an expert while expanding your knowledge. For the latest news from Aurora, visit aurora.tech or follow us on LinkedIn.

 

Aurora hires talented people with diverse backgrounds who are ready to help build a transportation ecosystem that will make our roads safer, get crucial goods where they need to go, and make mobility more efficient and accessible for all. We’re searching for a Staff SOC Manager - Aurora Technical Operations Center.

Aurora’s Technical Operation Center serves as a 24x7 comprehensive technical support center spanning the entire enterprise.

Our team is responsible for: 

• 24/7 security monitoring, alert management, security tool administration, threat intelligence integration, forensic support for incidents, performance reporting.
• Service onboarding, creating and refining runbooks for incident response and routine operations, developing automation scripts for common alerts and tasks.
• Network health monitoring, incident detection, first-level troubleshooting, escalation to engineering teams, performance reporting.

 

In this role, you will

• Lead, mentor, and develop a team of SOC analysts (Tier 1, 2), engineers, and/or specialists. Develop and manage 24x7 team schedules, on-call rotations, and resource allocation to ensure continuous coverage for cyber security, production security, and network operations.
• Conduct performance reviews, provide regular feedback, and support professional growth. Foster a culture of continuous improvement, learning, and collaboration within the SOC/NOC.

• Oversee 24/7 security monitoring, incident detection, and analysis, spanning cybersecurity threats, production security product support, and network operational alerts.
• Drive timely, end-to-end incident response efforts from detection to resolution, ensuring timely containment, eradication, recovery, and post-incident analysis for cyber security, production security, and network events.
• Develop, refine, and enforce SOC/NOC playbooks, standard operating procedures (SOPs), runbooks, and training for security incidents and network operational issues.
• Ensure effective use of security tools (SIEM, EDR, SOAR, Vulnerability Scanners, etc.) for threat detection and response, and operational monitoring tools for network health
• Conduct regular threat hunting exercises to proactively identify sophisticated threats.

• Identify and implement improvements to SOC processes, tools, and technologies across security and network operations.
• Develop, report on, and improve key performance indicators (KPIs), telemetry coverage, and alert fidelity.
• Manage the monitoring and triage of tickets for the Security Software Engineering team, providing initial response and escalations as needed.
• Support network operations by overseeing monitoring, triage, and initial response to network-related alerts and incidents.

• Communicate effectively with internal stakeholders, including IT, engineering, legal, operations, and executive leadership regarding security incidents and posture.
• Collaborate with other security and network operations teams to enhance overall security posture and system reliability.
• Participate in internal and external audits as required. 
• Other duties as assigned.

 

Required Qualifications

• 10+ years of experience in cybersecurity, with at least 5+ years in a leadership or management role for a security engineering or operations team.
• Demonstrated experience building and leading 24x7 security operations teams, including Tier 1, 2, and 3 capabilities.
• Experience as a lead in a Security Operations program.
• Extensive experience with cybersecurity incident response investigations and management.
• Strong experience triaging and investigating cybersecurity alerts.
• Proficiency with SIEM, EDR and log analysis.
• Experience developing tools to optimize and automate response processes.
• Exceptional communication and stakeholder management skills with proven ability to communicate clearly with all leadership levels.
• Familiarit