Enterprise Security Operations Center Specialist Reading, PA

Penske Automotive Group - Reading, PA

Full-time

Reading, PA

Truck Transportation

About the position

The Enterprise Security Operations Center Specialist will play a crucial role in the development and enhancement of the security operations center at Penske. This position is designed to centralize both current and emerging security tools, enabling the organization to effectively highlight, mitigate, and respond to various security events, threats, and risks. The Specialist will be responsible for investigating, documenting, and reporting on any information security (InfoSec) issues, as well as identifying and analyzing emerging trends that could impact the organization. A key aspect of this role involves building internal processes aimed at reducing downtime and ensuring business continuity. The Specialist will analyze various data sources to identify patterns that may indicate potential security threats against the company or its associates, and will deploy appropriate response protocols. Additionally, the position will involve executing high-level enterprise-wide reports and assessments, providing valuable recommendations to the security leadership team. The responsibilities of the Specialist will include the development and launch of the Security Operations Center platform, which will combine new and existing security tools into a centralized reporting and investigation hub. The Specialist will create and maintain standard operating procedures (SOPs) to ensure consistency and efficiency in operations. In terms of threat and vulnerability analysis, the Specialist will prioritize internal and external threats, developing effective response plans and preventative measures to mitigate potential losses and risks. Continuous improvement will be a focus, leveraging technology trends such as artificial intelligence to proactively detect, monitor, research, and respond to threats that could impact business operations. The Specialist will also manage and maintain current security tools to ensure ongoing business continuity and facilitate collaboration with local law enforcement and security agencies. Furthermore, the Specialist will identify and administer security tools necessary for reporting, security assessments, and communications. This includes utilizing crime data, risk assessments, and other relevant information to communicate vulnerabilities and solutions effectively. The role may also involve other projects and tasks as assigned, requiring a proactive and adaptable approach to security operations.

Responsibilities

• Support the development and launch of the Security Operations Center platform.
• Centralize current and emerging security tools for reporting and investigations.
• Create and maintain standard operating procedures (SOPs).
• Prioritize internal and external threats and develop effective response plans.
• Develop preventative plans to mitigate losses and risks.
• Leverage technology trends to proactively detect and respond to threats.
• Manage and maintain current security tools to ensure business continuity.
• Facilitate collaboration with local law enforcement and security agencies.
• Utilize crime data and risk assessments for security reporting.
• Identify external tools for business continuity and communicate vulnerabilities.

Requirements

• Bachelor's Degree required, preferably in Criminal Justice, Cyber or related field.
• Master's Degree preferred or equivalent work experience if no degree.
• EC-Council Certified SOC Analyst certification required.
• Cisco Certified CyberOps certification required.
• 3 years of experience in Security Operations Center, Fusion/911 Center, Incident response investigations, Security Analytics or Cyber Security required.
• 2 years of experience in Threat/Risk Analytics and Project Management required.
• Proficient in using Security Information and Event Management (SIEM) solutions.
• Familiarity with other security tools including disaster recovery plans preferred.
• Experience in Fusion Center/911 Dispatch and Open-source intelligence required.
• Proficient in Dataminr, ArcGIS, ESRI or similar tools.
• Experience in Threat Assessment analytics and supervisory roles required.
• Strong communication skills, both written and verbal, are essential.
• Ability to collaborate and report incidents to stakeholders within the organization.
• Strong analytical and critical thinking skills are necessary.
• Proficiency in Microsoft Office Suite required.
• Detail-oriented with strong organizational and documentation skills.

Nice-to-haves

• Familiarity with disaster recovery plans.
• Experience with additional security tools and technologies.