If you are looking for a career at a dynamic company with a people-first mindset and a deep culture of growth and autonomy, ACV is the right place for you! Competitive compensation packages and learning and development opportunities, ACV has what you need to advance to the next level in your career. We will continue to raise the bar every day by investing in our people and technology to help our customers succeed. We hire people who share our passion, bring innovative ideas to the table, and enjoy a collaborative atmosphere.
Who We Are
ACV is a technology company that has revolutionized how dealers buy and sell cars online. We are transforming the automotive industry. ACV Auctions Inc. (ACV), has applied innovation and user-designed, data driven applications and solutions. We are building the most trusted and efficient digital marketplace with data solutions for sourcing, selling and managing used vehicles with transparency and comprehensive insights that were once unimaginable. We are disruptors of the industry and we want you to join us on our journey. Our network of brands include ACV Auctions, ACV Transportation, ClearCar, MAX Digital and ACV Capital within its Marketplace Products, as well as, True360 and Data Services.
ACV Auctions in Chennai, India are looking for talented individuals to join our team. As we expand our platform, we're offering a wide range of exciting opportunities across various roles in corporate, operations, and product and technology. Our global product and technology organization spans product management, engineering, data science, machine learning, DevOps and program leadership. What unites us is a deep sense of customer centricity, calm persistence in solving hard problems, and a shared passion for innovation. If you're looking to grow, lead, and contribute to something larger than yourself, we'd love to have you on this journey. Let's build something extraordinary together. Join us in shaping the future of automotive!
At ACV we focus on the Health, Physical, Financial, Social and Emotional Wellness of our Teammates and to support this we offer industry leading benefits and wellness programs.
Overview
We are seeking a highly motivated and experienced Threat Detection and Response (TDR) Engineer to build our Security Operations Center (SOC) and incident response capabilities. This is a critical leadership role responsible for protecting our SaaS platform, customer data, and the integrity of our wholesale automotive auction environment. You will be instrumental in establishing and maturing our security posture, driving automation, and ensuring the confidentiality, integrity, and availability of our systems and data, crucial for maintaining trust within the automotive wholesale marketplace.
Responsibilities
- Incident Response & Management: Lead all security investigations, incident coordination, and management related to security events. Develop, implement, and maintain a world-class Incident Response Policy, Process, and Procedure aligned with industry best practices (NIST, SANS) and relevant compliance requirements, specifically considering the sensitivity of financial transactions and vehicle data within the automotive wholesale space.
- SIEM Management: Design, implement, and maintain a robust Security Information and Event Monitoring (SIEM) system, integrating logs and events across our multi-tiered infrastructure. Develop and maintain a multi-year roadmap for SIEM enhancements and capabilities to proactively identify and respond to emerging threats.
- SOC Build & Operations: Oversee the complete build and ongoing operations of a follow-the-sun Security Operations Center (SOC) tailored to ACV Auctions specific requirements and risk profile. This includes managing alert prioritization, investigation, and escalation processes, while ensuring optimal performance and efficiency.
- SOAR Development & Automation: Lead the development and implementation of Security Orchestration, Automation, and Response (SOAR) workflows to automate repetitive tasks, improve response times, and enhance overall SOC efficiency. Identify, prioritize, and implement key automation opportunities on a regular basis.
- Detection & Response (TDR) Program: Develop and champion a comprehensive Detection and Response (TDR) program for the enterprise. Create and execute regular tabletop exercises and security testing activities to validate security controls, identify gaps, and improve security awareness across the organization, particularly around phishing and social engineering targeting our auction platform users.
- Security Brand & Leadership: Act as a security champion and mentor within the organization. Provide security operational leadership, proactively communicate security risks and best practices, and collaborate effectively with cross-functional teams (Engineering, Product, Operations, Compliance) to integrate security into all aspects of our business. Sell the importance of security throughout the organization and ensure buy-in from key stakeholders.
- Compliance & Risk Management: Stay abreast of relevant regulatory requirements (e.g., PCI DSS, GDPR, CCPA, data security standards specific to the automotive industry) and ensure our security practices align with these standards. contribute to risk assessments and mitigation efforts.
Requirements
- 8+ years experience
- Minimum of a 4 year Bachelor's degree,
- Ability to read, write, speak and understand English.
- Ability to read, write, speak and understand English.
- Excellent communication, interpersonal and leadership skills, with the ability to interact with staff at all levels.
- Knowledge of CASB, DLP and SASE technologies
- Proven ability to be agile and work effectively in a dynamic environment.
- Demonstrated ability to perform under pressure and respond rapidly to emerging incidents and situations.
- Excellent coordination, project management, and organization skills and comfortable with multi-tasking in a high-energy environment.
- Should be a creative and analytical problem solver with a passion to provide excellent customer service.
- Practical hands-on experience engineering and implementing data security controls in cloud environments including databases, datastores and SaaS platforms.
- Linux and Kubernetes/Container management and security
- DevOps code based implementation and management
- Knowledge of AWS including but not limited to S3, Lambda, RDS, EC2 and AWS Security Center
- Understanding of TCP/IP Networking including knowledge of Protocols and Services
- Understanding of what Information or Assets are of value to Threat Actors and how Organizations are Breached and Customer Accounts Compromised.
- Overall understanding of the Security domain, compliance, business, risk, ops etc ALONG with its application to the business.
Our Values
Trust & Transparency | People First | Positive Experiences | Calm Persistence | Never Settling
At ACV, we are committed to an inclusive culture in which every individual is welcomed and empowered to celebrate their true selves. We achieve this by fostering a work environment of acceptance and understanding that is free from discrimination. ACV is committed to being an equal opportunity employer regardless of sex, race, creed, color, religion, marital status, national origin, age, pregnancy, sexual orientation, gender, gender identity, gender expression, genetic information, disability, military status, status as a veteran, or any other protected characteristic. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires reasonable accommodation, please let us know.
Data Processing Consent
When you apply to a job on this site, the personal data contained in your application will be collected by ACV Auctions Inc. and/or one of its subsidiaries (ACV Auctions).
By clicking apply, you hereby provide your consent to ACV Auctions and/or its authorized agents to collect and process your personal data for purpose of your recruitment at ACV Auctions and processing your job application. ACV Auctions may use services provided by a third party service provider to help manage its recruitment and hiring process. For more information about how your personal data will be processed by ACV Auctions and any rights you may have, please review ACV Auctions candidate privacy notice here. If you have any questions about our privacy practices, please contact [Confidential Information].
