Senior Cybersecurity Engineer – Defense Operations

About the role

Motional is looking for a senior cybersecurity professional to lead its Defense Operations team. The role focuses on hands‑on incident response, security monitoring, and continuous improvement of on‑premise, SaaS and cloud platforms.

Key responsibilities

• Act as frontline incident responder, handling detection, containment, eradication, remediation and recovery.
• Lead post‑incident reviews to drive continuous improvement of security posture.
• Serve as primary APAC interface with the managed detection and response provider for triage, escalation and threat hunting.
• Administer and optimise the core Defense Operations toolset, including SIEM, EDR, cloud security, email security and vulnerability management services.
• Enhance cloud security processes and tooling in partnership with internal cybersecurity and engineering teams.
• Guide DevOps, IT, HR and Engineering teams to proactively identify, assess and mitigate cyber risks.
• Provide technical strategy for the end‑to‑end vulnerability management program and help stakeholders remediate critical findings.
• Design, document and operationalise security procedures, playbooks and runbooks for Managed Detection and Response activities.

Required profile

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Systems or related field, or equivalent experience.
• 5+ years of hands‑on experience in cybersecurity operations, SOC, incident response or engineering.
• Strong experience with AWS and cloud‑native security best practices.
• Proven ability to analyse alerts and logs from SIEM, EDR, SEG, CNAPP, IAM and OS/application sources.
• Experience deploying and managing SIEM/EDR platforms such as Splunk, Microsoft and CrowdStrike.
• Solid background in vulnerability scanning and CVE impact analysis.
• Ability to automate security tasks using scripting languages (Python, Bash, PowerShell).

Required skills

• AWS
• Cloud‑native security
• SIEM (e.g., Splunk, Microsoft)
• EDR (e.g., CrowdStrike)
• Vulnerability scanning and CVE analysis
• Python
• Bash
• PowerShell
• Terraform (bonus)
• Identity and access management tools (Okta, SSO, SAML)