Security Operations Manager

About Woven by Toyota
Woven by Toyota is enabling Toyota’s once-in-a-century transformation into a mobility company. Inspired by a legacy of innovating for the benefit of others, our mission is to challenge the current state of mobility through human-centric innovation — expanding what “mobility” means and how it serves society.

Our work centers on four pillars: AD/ADAS, our autonomous driving and advanced driver assist technologies; Arene, our software development platform for software-defined vehicles; Woven City, a test course for mobility; and Cloud & AI, the digital infrastructure powering our collaborative foundation. Business-critical functions empower these teams to execute, and together, we’re working toward one bold goal: a world with zero accidents and enhanced well-being for all.

=========================================================================

TEAM
The security team at Woven by Toyota is on the cutting edge of many challenging security problems. We identify emerging security threats in autonomous vehicles and help design more secure systems. We work closely with internal platform teams to provide a secure development environment through tooling and automation, allowing developers to innovate quickly without compromising security.

WHO ARE WE LOOKING FOR?
We are seeking a Security Operations Center leader for the Japan region. Your team is responsible for triage and response to security alerts and incidents. You will work across the organization to build detection and response capabilities for a scalable incident lifecycle, and will collaborate with partner SOCs in the US and UK regions to provide 24/7 defensive operations to the Woven by Toyota enterprise.

This is the front-line team that responds to security threats and malicious activity in all of Woven by Toyota’s environments. You should know how to prioritize, communicate clearly and compellingly, and understand how to drive a high level of focus and excellence with a strong team. Woven by Toyota Security demands high standards, so a passion for and discipline around security and delivery is critical. You’ll report to the security operations senior manager, and come to the office 3x per week as per our hybrid work policy.

RESPONSIBILITIES:
• Lead our technical security operations team responsible for intrusion detection and incident response

• Respond to security incidents, conduct forensics and technical investigations

• Inspire, grow, and develop talent while providing vision, setting team direction, and leading effectively through outcomes rather than tasks

• Help define and execute strategy for detection, investigation, and incident response

• Create changes in the team to increase enterprise visibility and defensibility, and improve security operation processes, including an increase for automation where possible

• Measure and report on operational metrics, objectives, and key performance indicators to assure the team achieves operational excellence

• Solve problems in unique ways with an automation-first mindset

MINIMUM QUALIFICATIONS:
• 1+ years of experience of technical leadership, or managing & developing high performance teams

• 5+ years of hands-on technical experience as a security professional

• Hands-on experience with AWS, Azure, GCP

• Ability to triage, investigate and respond to security alerts and conduct technical investigations of security incidents to identify root causes

• Experience explaining business impact of a security incident to a non-technical executive

NICE TO HAVES:
• 3+ years of experience in technical leadership & developing high performance teams

• Experience in leading SOC improvement projects, large-scale SIEM, SOAR, EDR and other major security deployments

• Experience with Extended Detection and Response (XDR) tools such as Microsoft 365 Defender, Crowdstrike, etc

• Hands-on experience with a major forensics toolkit (Velociraptor, Encase, FTK, etc)

• Experience with operating under various privacy frameworks (CCPA, GDPR, etc)

• Significant experience with detection engineering, incident response, and threat intelligence

=========================================================================
Important Points
・All interviews will be arranged via Google Meet, unless otherwise stated.
・The same job descriptions are available in both English and Japanese; therefore, we kindly ask that you apply to only one version.
・We kindly request that you submit your resume in English, if possible. However, Japanese resumes are also acceptable. Please note that, depending on the English proficiency requirements of the role, we may request an English version of your resume later in the process.

WHAT WE OFFER
・Competitive Salary - Based on experience
・Work Hours - Flexible working time
・Paid Holiday - 20 days per year (prorated)
・Sick Leave - 6 days per year (prorated)
・Holiday - Sat & Sun, Japanese National Holidays, and other days defined by our company
・Japanese Social Insurance - Health Insurance, Pension, Workers’ Comp, and Unemployment Insurance, Long-term care insurance
・Housing Allowance
・Retirement Benefits
・Rental Cars Support
・In-house Training Program (software study/language study)

Our Commitment
・We are an equal opportunity employer and value diversity.
・Any information we receive from you will be used only in the hiring and onboarding process. Please see our privacy notice for more details.