10318 - Cyber Defense Head of Department (HOD)

HyundaiAutoEverAmerica (HAEA), the dynamic IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. As a key affiliate, we providecutting-edgeIT services and support to top brands including Kia, Genesis, HyundaiTranslead, Hyundai Mobis, Hyundai Capital, andGlovis.

HAEA offers a truly global and collaborative environment. Here,you’lldrive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group.

At HAEA, we understand that IT is the cornerstone of today’s fast-evolving digital world. By uniting all IT resources under one roof, we deliver consistent, top-quality solutions while serving as the crucial information link between Hyundai’s Global Headquarters and North American operations.

Ifyou’repassionate about technology and eager to make a real impact at a world-class company, HyundaiAutoEverAmerica is the place to grow your career. Join us and be part of the transformationthat’sdriving the future of automotive innovation.

Role Overview:

The Cyber Security Defense Head of Department (HOD) serves as the senior leader responsible for the vision, strategy, execution, and continuous advancement of the organization's cyber defense program. This role requires a highly experienced, hands-on cybersecurity executive with CISO-level expertise who can effectively balance strategic leadership with operational execution. The successful candidate will lead and mature all defensive security functions, including the Security Operations Center (SOC), Incident Response, Threat & Vulnerability Management (TVM), Blue Team Operations, Red Team and Adversary Simulation, Penetration Testing, and Application Security.

The ideal candidate is a well-rounded cybersecurity leader who is equally comfortable presenting risk and security strategy to executive leadership as they are engaging directly with technical teams during active incidents, security assessments, or transformation initiatives. They will be expected to actively guide, mentor, and support teams at every level, roll up their sleeves when necessary, and foster a culture of accountability, operational excellence, continuous improvement, and innovation. This leader will play a critical role in strengthening the organization's security posture, developing high-performing teams, and ensuring cyber defense capabilities evolve to address emerging threats and business objectives. Key responsibilities of this role are outlined below.

Security Operations & Blue Team Oversight

• Oversee 24x7 SOC operations, ensuring effective monitoring, detection, and response to security events, across levels 1-3.
• Drive continuous enhancement of detection engineering, threat hunting, and security analytics.
• Implement best-in-class security tooling, automation, and operational processes.

Adversarial Security: Red Team & Penetration Testing

• Lead internal Red Team and offensive security capabilities, including penetration testing.
• Define testing methodologies, operational rules of engagement, and reporting standards.
• Translate offensive findings into actionable improvements for defensive teams and architecture.

Incident Response & Crisis Management

• Oversee the Incident Response program, ensuring rapid and effective handling of security incidents.
• Lead tabletop exercises, simulation drills, and readiness assessments.
• Facilitate and lead high/critical incidentresponses,when the Incident Response Manager is unavailable.Coordinate with legal, communications, and executive stakeholders during major incidents.

Threat & Vulnerability Management (TVM)

• Own the enterprise-wide vulnerability management strategy, including prioritization, remediation, and reporting.
• Drive continuous scanning, assessment, and metrics to reduce risk across infrastructure, applications, and cloud environments.
• Collaborate with engineering and operations teams to ensuretimelyand effective remediation.
• Facilitate andthe zero-day vulnerability response process, when the Incident Response Manager is unavailable.

Application Security (AppSec)

• Lead the organization’s AppSec program, including secure SDLC practices, code reviews, SAST/DAST tools, and developer enablement.
• Partner with software engineering to embed security into product and platform design.

Adversary Simulation & Cyber Readiness

• Develop and run adversary simulation programs that mimic real-world threat actors.
• Use intelligence-led scenarios to evaluate detection capabilities, response effectiveness, and organizational resilience.

BasicQualifications:

• Experience & Leadership: 10+yearsof progressive experience acrossthe various cyber defense disciplines(SOC, Incident Response, Red/Blue teams, or similar defensive/offensive functions.)Proven experience leadingcyber defense teams.Demonstrated ability to hire, mentor, and lead high-performing technical teams.
• Education: Bachelor’s degree in Cybersecurity, Information Technology,ComputerScienceora relateddiscipline.
• Technical Expertise:Strong knowledge of threat detection,incident response,adversary tactics (MITRE ATT&CK), vulnerability management, and secure software development.
• Language Skills: Proficient in English for effective communication and coordination.
• Availability:In theabsenceofIRteam members,utilizea flexible work schedule tofacilitatethe security incident response process for high/critical incidents.

Preferred Qualifications:

• Education andCertifications:Master'sdegree in Cybersecurity,Information Technology,ComputerScienceor a relateddiscipline is preferred.Industry-recognized credentials such asCISSP, CISM, OSCP/OSCE, GIAC (GSEC, GCIA, GCIH, GPEN, GXPN)are highly desirable.
• FrameworkExperience:Familiaritywith, and prior participation withFIRST (Forum of Incident Response and Security Teams) is preferred.
• Language Skills:Bi-lingual in English andKorean languageproficiencyis preferred to support global coordination and communication.
• Proven experience collaborating with global teams across diverse regions and cultures, building strong cross-functional partnerships.

Team Culture:

The team fosters a high-performance, collaborative environment centered around proactive cybersecurity defenseand excellent customer service. Members are expected tolead withaccountability, communicate effectively across functions, and adapt to dynamic challenges. The culture values technical excellence, continuousimprovement, and global coordination, ensuring readiness and resilience in the face of evolving threats.

• Collaborative Leadership:Team members lead cross-functionalservice deliveryefforts, coordinating with internal stakeholders, MSSPs, and external partners to drivedelivery of servicesandmaintaintransparency.
• Continuous Improvement & Accountability:The team regularlyadjusts the Information Security strategy and roadmap in alignment with customer needs, changing threat landscape and industry trends.

Base Salary Range: $181,240 - $ 259,160