Regional Lead Engineer, Cyber Defense Center

Regional Lead Engineer, Cyber Defense CenterLocation:Greensboro, NC, US, 27409Position Type: ProfessionalTransport is at the core of modern society. Imagine using your expertise to shape sustainable transport solutions for the future? If you seek to make a difference on a global scale, working with next-gen technologies and the sharpest collaborative teams, then we could be a perfect match.What you will doAs the Regional Lead Engineer for the Cyber Defense Center (CDC), you will define and execute the technical strategy for our security engineering program. You'll lead threat intelligence, detection, response, and automation efforts for the CDC, driving architectural, data, and workflow improvements. Your expertise will empower the engineering team to deliver top-tier security solutions and enhance our defenses.Key Responsibilities:Technical Leadership & Mentorship:

Act as the technical authority for the regional CDC security engineering program.

Provide technical direction and guidance to the engineering team, ensuring the successful implementation of the backlog and the achievement of security objectives.

Evaluate and recommend new security technologies and solutions, staying abreast of emerging trends and their potential impact.

Foster a culture of innovation and continuous improvement within the engineering team.

Detection Engineering & Automation:

Lead the development and refinement of detection and response content and coverage, leveraging AI and automation where appropriate.

Contribute to the development and maintenance of CI/CD pipelines, ensuring the seamless and secure automated delivery of security automation and detection content.

Work closely with the CDC teams and other stakeholders to analyze incidents, refine security controls, and integrate threat intelligence into our defense strategy.

Threat Intelligence & Proactive Defense:

Define tailored threat intelligence suitable for various operational workflows, enabling proactive defense.

Participate in continuous security validation efforts, leveraging threat intelligence and simulated attacks, including breach attack simulations, to assess the effectiveness of security controls and identify areas for improvement.

Optimize and potentially automate all steps of the CDC Operations lifecycle: from preparation and alerting to triage, case management, response, and reporting. Use targeted automation and appropriate tools to increase response quality and reduce turnaround time.

Security Tool Expertise & Optimization:

Provide expert guidance on the configuration, optimization, and integration of key security tools such as XDR (including EDR and NDR), network security, IDM, and email security solutions.

Collaborate with other operational teams to ensure seamless integration and optimization of security tools and technologies.

Data Platform Architecture:

Contribute to the design and maintenance of a hybrid data ecosystem that empowers threat detection, efficient investigations, and AI-driven analytics while optimizing data retention and cost. This ecosystem should include data platforms capable of running on SQL and NoSQL databases, and effectively handling both structured and unstructured data.

Ensure a pre-processing data layer optimizes data ingestion and reduces processing costs for the central data engine.

Collaboration & Influence:

Act as a subject matter expert, providing guidance and support to corporate IT teams for new preventive security controls.

Build strong relationships with key stakeholders across the organization, fostering collaboration and alignment on security initiatives.

Who are you?Do you dream big? We do too, and we are excited to grow together. In this role, you will bring:

Solid foundation in IT security with 7+ years of experience

Proven technical leadership and expertise in security engineering

Deep understanding of security tools, automation, data analytics, and incident response

Solid programming and/or scripting experience (e.g., PowerShell, Python)

Proficiency in query languages (Splunk SPL, KQL, SQL)

Good understanding of SQL, NoSQL, and Graph database architecture

Hands-on technical experience with configuring security tools such as XDR (including EDR and NDR), IDM, and email security solutions

Familiarity with DevSecOps and CI/CD, YAML-based pipelines

Strong analytical and problem-solving abilities

Excellent communication and collaboration skills

Experience working in an agile environment and understanding of Agile methodologies

Background in Security Operations Center, Software Development, and/or Software Architecture

Understanding of OT security principles

What’s in it for you?We offer a solid package of compensation and benefits, plus you will enjoy:

Competitive medical, dental and vision insurance.

Generous paid time off including paid caregiver and parental leave policies.

Competitive matching retirement savings plans.

Working environment where your safety, health and wellbeing come first.

Focus on professional and personal development through Volvo Group University.

Programs that make today’s challenging reality of combining work and personal life easier.

Ready for the next move?If you want to make a real impact in your career, the transportation business is where you want to be. We look forward to meeting you.We value your data privacy and therefore do not accept applications via mail.Who we are and what we believe inOur focus on Inclusion, Diversity, and Equity allows each of us the opportunity to bring our full authentic self to work and thrive by providing a safe and supportive environment, free of harassment and discrimination. We are committed to removing the barriers to entry, which is why we ask that even if you feel you may not meet every qualification on the job description, please apply and let us decide. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Applying to this job offers you the opportunity to join Volvo Group. Every day, across the globe, our trucks, buses, engines, construction equipment, financial services, and solutions make modern life possible. We are almost 100,000 people empowered to shape the future landscape of efficient, safe and sustainable transport solutions. Fulfilling our mission creates countless career opportunities for talents with sharp minds and passion across the group’s leading brands and entities.Group Digital & IT is the hub for digital development within Volvo Group. Imagine yourself working with cutting-edge technologies in a global team, represented in more than 30 countries. We are dedicated to leading the way of tomorrow’s transport solutions, guided by a strong customer mindset and high level of curiosity, both as individuals and as a team. Here, you will thrive in your career in an environment where your voice is heard and your ideas matter.Job Category: Information TechnologyOrganization: Group Digital & ITTravel Required: Occasional TravelRequisition ID: 13578View All Jobs (https://jobs.volvogroup.com/?locale=enUS)Do we share the same aspirations?Every day, Volvo Group products and services ensure that people have food on the table, children arrive safely at school and roads and buildings can be constructed. Looking ahead, we are committed to driving the transition to sustainable and safe transport, mobility and infrastructure solutions toward a net-zero society.Joining Volvo Group, you will work with some of the world’s most iconic brands and be part of a global and leading industrial company that is harnessing automated driving, electromobility and connectivity.Our people are passionate about what they do, they aim for high performance and thrive on teamwork and learning. Everyday life at Volvo is defined by a climate of support, care and mutual respect.If you aspire to grow and make an impact, join us on our journey to create a better and more resilient society for the coming generations.Nearest Major Market: Greensboro