> Markdown version of [/jobs/ext/2889163-vehicle-security-operations-engineer](https://www.wearedevelopers.com/jobs/ext/2889163-vehicle-security-operations-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Vehicle Security Operations Engineer - **Company:** Renrui HR - **Location:** Vitoria-Gasteiz, Spain - **Contract:** Permanent contract - **Skills:** Cloud Computing Security, Cyber Security, Intrusion Detection and Prevention, Intrusion Detection Systems, Security Information and Event Management, Backend, Information Technology, Cybercrime, Vulnerability Analysis - **Published:** September 13, 2026 - **Apply:** https://www.buscojobs.com.es/vehicle-security-operations-engineer-en-vitoria-ID-371085311 ## About the Role * Bachelor's degree or above in Computer Science, Cybersecurity, Communications Engineering or a related field. * At least 3 years of professional experience in cybersecurity operations, SOC, incident response, detection engineering or a closely related area. * Hands-on experience with SIEM, IDS or other security-monitoring and threat-detection platforms. * Experience in security alert analysis, incident investigation, vulnerability analysis, threat hunting or response playbook development. * Ability to manage the complete issue lifecycle, from identification and escalation through investigation, remediation, verification and closure. * Automotive cybersecurity, connected vehicle, telematics, IoT, OEM or Tier 1 experience is strongly preferred. * Knowledge of ISO/SAE *****, UNECE R155/R156, CSMS, GDPR or European connected vehicle regulations is highly desirable. * Experience supporting the overseas implementation or operation of connected vehicle services is preferred. * English must both be usable as working languages. * Spanish or another European language is an advantage. * Strong cross-functional and cross-cultural communication skills, with the ability to coordinate effectively between global headquarters and European local teams. * Willingness to undertake occasional business travel. Preferred Backgrounds We particularly welcome candidates with experience in Vehicle SOC/VSOC, Automotive CSIRT or PSIRT, connected vehicle security operations, automotive incident response, detection engineering or automotive cloud security. ## Description About the RoleOn behalf of a leading global automotive OEM, we are looking for a Vehicle Security Operations Engineer to join its European R&D organization in Barcelona.This role is responsible for the local cybersecurity operations of connected vehicles, cloud platforms and backend services across the European market.You will monitor and investigate security events, optimize detection capabilities and coordinate with global headquarters, European teams and external partners to ensure incidents are handled effectively and brought to full closure.Key Responsibilities* Perform cybersecurity monitoring and security operations for connected vehicles, cloud platforms and backend services in Europe.* Monitor abnormal cybersecurity behaviours, attack patterns and potential threats, identifying and investigating vehicle-related alerts and incidents.* Conduct alert triage, incident investigation, root-cause analysis and follow-up actions, driving identified issues through to effective closure.* Develop, maintain and optimize SIEM/IDS detection rules, correlation rules and vehicle-security use cases.* Improve VSOC detection coverage, incident-response playbooks, monitoring processes and security automation capabilities.* Support proactive threat hunting, vulnerability analysis and continuous improvement of security monitoring.* Establish local processes, operating standards and reporting mechanisms for European vehicle cybersecurity operations.* Support the secure and compliant operation of connected vehicle services in accordance with ISO/SAE *****, UNECE R155/R156, GDPR and other relevant European requirements.* Collaborate with headquarters, European engineering teams, Product, Quality, Aftersales, Operations, Tier 1 suppliers and technical service providers.* Prepare incident reports, technical analyses, operational records and decision-support materials.Requirements* Bachelor's degree or above in Computer Science, Cybersecurity, Communications Engineering or a related field.* At least 3 years of professional experience in cybersecurity operations, SOC, incident response, detection engineering or a closely related area.* Hands-on experience with SIEM, IDS or other security-monitoring and threat-detection platforms.* Experience in security alert analysis, incident investigation, vulnerability analysis, threat hunting or response playbook development.* Ability to manage the complete issue lifecycle, from identification and escalation through investigation, remediation, verification and closure.* Automotive cybersecurity, connected vehicle, telematics, IoT, OEM or Tier 1 experience is strongly preferred.* Knowledge of ISO/SAE *****, UNECE R155/R156, CSMS, GDPR or European connected vehicle regulations is highly desirable.* Experience supporting the overseas implementation or operation of connected vehicle services is preferred.* English must both be usable as working languages.* Spanish or another European language is an advantage.* Strong cross-functional and cross-cultural communication skills, with the ability to coordinate effectively between global headquarters and European local teams.* Willingness to undertake occasional business travel.Preferred BackgroundsWe particularly welcome candidates with experience in Vehicle SOC/VSOC, Automotive CSIRT or PSIRT, connected vehicle security operations, automotive incident response, detection engineering or automotive cloud security. ## Related Videos - [Cybersecurity for Software Defined Vehicles](https://www.wearedevelopers.com/videos/725-cybersecurity-for-software-defined-vehicles) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Developing the Backend with Stefan Lingler, CTO at Shpock](https://www.wearedevelopers.com/videos/100360-developing-the-backend-with-stefan-lingler-cto-at-shpock) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Agile work at CARIAD – Creating a customer web application for controlling the vehicle ](https://www.wearedevelopers.com/videos/200-agile-work-at-cariad-creating-a-customer-web-application-for-controlling-the-vehicle) ## Related Articles - [How software is steering vehicle technology](https://www.wearedevelopers.com/magazine/515-how-software-is-steering-vehicle-technology) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)