Senior Security Operations Specialist (SOC) - Tires

Description

You will join the Cyber Defense Center as a Senior Security Operations Specialist, part of a global team that protects the company's people, systems and data.

You will lead work on complex cyber threats, improve detection and response, and serve as the top escalation point for the SOC team. You will use advanced tools, threat intelligence and proactive hunting to defend the global environment against capable attackers.

The company is a leading tire manufacturer and industry specialist, founded in 1871, with 2025 sales of €19.7 billion.

It employs about 78,000 people across 54 countries and markets.

The Tires group sector makes mobility safer, smarter and more sustainable. Its portfolio covers car, truck, bus, two-wheel and specialty tires, plus smart solutions and services for fleets and tire retailers.

The company has delivered top performance for over 150 years and is one of the world's largest tire makers. The Tires sector generated €13.8 billion in fiscal 2025.

The tire division has over 55,000 staff worldwide, with 19 production sites and 16 development sites.

Responsibilities

• Triage, verify and handle complex incidents escalated by the CrowdStrike Falcon Complete MDR Service, SOC analysts, users and other IT teams.
• Run deep investigations of advanced incidents using CrowdStrike Falcon, Microsoft Defender, SIEM platforms and other security tools.
• Review alerts, unusual activity, attack patterns and threat actor behaviour using endpoint, cloud and SIEM data alongside threat intelligence.
• Carry out in-depth root cause analysis, establish how far an attack reached and what it affected, and report findings with recommendations.
• Direct containment, eradication and recovery for major incidents.
• Run proactive threat hunts, starting investigations from intelligence, new threats and hypotheses.
• Work with Incident Response, Infrastructure, Cloud, Identity and Business teams during major cyber incidents.
• Write incident reports, executive summaries, lessons learned and technical documentation.
• Work with the Global SOC team and security stakeholders to make operations more effective and monitoring more mature.
• Lead the building, tuning and upkeep of incident response playbooks, use cases and procedures.
• Keep current on new threats, attack methods, adversary tradecraft and security tools.
• Build and tune detection rules, analytics and correlation logic to widen SOC visibility.
• Do advanced threat modelling and map detections to MITRE ATT&CK.
• Coach junior and mid-level analysts and advise them during investigations.
• Be the senior escalation point for high-severity events and lead the response to major cyber events.
• Find security gaps, suggest strategic fixes and drive detection and response improvements.
• Take part in purple-team, tabletop and adversary emulation exercises to test controls.

Requirements

• A bachelor's degree in computer science, information security, cybersecurity or a similar discipline.
• 5+ years of experience in security operations, incident response, threat hunting or a similar cybersecurity role.
• A proven record of handling complex cyber incidents in enterprise settings.
• Solid hands-on work in security monitoring, incident investigation and enterprise detection technologies.
• A good grasp of MITRE ATT&CK and the Cyber Kill Chain.
• A good grasp of NIST, ISO 27001, CIS Controls and incident response best practice.
• Advanced knowledge of Windows, Active Directory, Entra ID, networking and enterprise security architectures.
• Extensive experience with CrowdStrike, Microsoft Defender, SIEM platforms, EDR/XDR and cloud security tools.
• Experience writing detection logic, threat hunting hypotheses and monitoring use cases.
• Experience with malware triage, attack chain analysis and forensic investigation.
• Understanding of cloud security across Microsoft Azure, AWS and Microsoft 365.
• Scripting or automation with PowerShell, Python, KQL or similar is a plus.
• CrowdStrike certifications such as CCFA, CCFR or CCFH are an advantage.
• Advanced certifications such as GCIA, GCIH, GCFA, GCFE, CISSP, SC-200 or equivalent are an advantage.
• Sharp analysis and problem solving.
• Good communication and teamwork abilities.
• Able to work alone and within an international team.
• Proven ability to lead technical investigations and coordinate across functions during major incidents.
• Genuine interest in cybersecurity and a drive to keep learning new skills.
• English at B2 level or higher.

Conditions

Working time is flexible.

The role is based in Timisoara.

The role involves working in an international environment with some travel.

Benefits

• A 13th salary.
• A performance bonus.
• Christmas and Easter bonuses.
• A seniority bonus.
• Competitive pay and benefits.
• A health and wellness package: life assurance, private health and dental insurance, sport activities, canteen, and a 24/7 helpline with psychologists.
• Discounts on tires, glasses, medical services, shopping and more.
• A relocation bonus for those who do not live in Timisoara.
• Professional development in technical and leadership areas.
• International work environment with travel opportunities.