Dana is a global leader in the supply of highly engineered driveline, sealing, and thermal-management technologies that improve the efficiency and performance of vehicles with both conventional and alternative-energy powertrains. Serving three primary markets - passenger vehicle, commercial truck, and off-highway equipment - Dana provides the world's original-equipment manufacturers and the aftermarket with local product and service support through a network of nearly 100 engineering, manufacturing, and distribution facilities.
Job Purpose
We are seeking a dedicated and proactive Product Cybersecurity Intelligence Leader to join our team. This role is crucial in leading and driving Dana's product cybersecurity attack detection and response efforts, investigating cybersecurity intelligence internal and external to Dana, and providing insights in preventing future attacks. This role interacts closely with the product cybersecurity incident response leader and the cybersecurity teams across Dana. This role will serve as a trusted advisor to the Global Head of Product Cybersecurity and contribute to future strategy development.
Job Duties and Responsibilities
Manager cybersecurity sources and triggersPerform cybersecurity monitoring and event evaluationMaintain and manage product cybersecurity asset databaseLead vulnerability analysis activities and recommend risk treatment decisionsLead internal cybersecurity teams to support cybersecurity intelligence ingestion, research, investigation, dissemination, and educationSupport incident response plan and executionStay abreast of the latest industry threat landscape development and advice leadership of relevant threats and risksManage relationship with Auto-ISAC and leverage Auto-ISAC effectivelyPatriciate in and contribute to Auto-ISAC workgroupsMonitor threat indicators and continuously maturate threat intelligence platformManage vulnerability management systemMonitor and analyze automotive products for potential cybersecurity threats and vulnerabilities.Develop and implement cybersecurity monitoring tools, processes, proceduresCollaborate with cross-functional teams to enhance Dana product security's detection and response capabilitiesLeverage lessons learned to prevent future attacksProvide regular reports to leadership on security status updates and threat landscape updatesEDUCATION AND QUALIFICATIONS* Bachelor's degree Computer Science, Information Security, Data Analytics, Information Technology, or a related field.* Advanced degrees preferred* Industry certifications such as ISO/SAE 21434, CISSP preferred* 7+ years of combined experience in cybersecurity monitoring, intelligence gathering, analyzing, researching, cybersecurity event evaluation and incident response, vulnerability analysis, threat analysis and risk assessment (TARA), automotive systems, embedded systems* Work experience in in threat intelligence feeds (STIX/TAXII), threat intelligence platform, vulnerability management system, and vendor solutions* Work experience in automotive cybersecurity highly desired* Experience in working with cross-functional team, influencing, negotiating with, and gaining buy-in from others, including senior leadership* Knowledge of cybersecurity standards and regulations such as ISO/SAE 21434, TISAX, ISO 27001, UNR 155/156, GDPR, NIST Cybersecurity Framework preferred* Strong analytical skills and attention to detail
SKILLS AND COMPETENCIES* Willingness to create order from ambiguity* Creative problem solver* Highly resourceful and efficient* Ability to work within tight design constraints* Flexibility in assisting where needed, when needed technically* Able to make decisions independently with appropriate level of consultation/co