<div><div>Leading the future in luxury electric and mobility</div><div>At Lucid, we set out to introduce the most captivating, luxury electric vehicles that elevate the human experience and transcend the perceived limitations of space, performance, and intelligence. Vehicles that are intuitive, liberating, and designed for the future of mobility.</div><div> </div><div>We plan to lead in this new era of luxury electric by returning to the fundamentals of great design – where every decision we make is in service of the individual and environment. Because when you are no longer bound by convention, you are free to define your own experience.</div><div> </div><div>Come work alongside some of the most accomplished minds in the industry. Beyond providing competitive salaries, we’re providing a community for innovators who want to make an immediate and significant impact. If you are driven to create a better, more sustainable future, then this is the right place for you.</div></div>At Lucid Motors, the Senior SOC Analyst, Cyber Threat Intelligence DFIR is responsible for the Security operations, Incident response, Threat Hunting and Cyber Threat Intelligence. This role is essential to strengthening our threat-informed defense posture and providing strategic and tactical intelligence to Security Operations, Incident Response, and Risk teams. The ideal candidate will bring deep experience in threat intelligence lifecycle management, dark web monitoring, identity intelligence, and exposure of enterprise assets across surface, deep, and dark web environments.    You Will:<ul><li>Collect, analyze, and operationalize threat intelligence across surface, deep, and dark web sources. </li></ul><ul><li>Use tools such as Recorded Future, CrowdStrike Counter Adversary Module, OSINT, and dark web monitoring platforms to identify emerging threats, campaigns, and threat actor behaviors. </li></ul><ul><li>Perform identity intelligence and account exposure investigations across criminal forums, paste sites, and marketplaces. </li></ul><ul><li>Monitor and assess threats from social media, hacktivist groups, and geopolitical activity. </li></ul><ul><li>Enrich SOC and IR investigations with contextual threat intelligence (IOCs, TTPs, attribution). </li></ul><ul><li>Track and report on threat actors, malware families, exploit trends, and sector-specific targeting. </li></ul><ul><li>Produce periodic threat assessments, intelligence briefings, and alerts for internal stakeholders. </li></ul><ul><li>Collaborate with Detection Engineering to convert intelligence into detections and hunt hypotheses. </li></ul><ul><li>Support intelligence requirements for Security Operations, Incident Response, Risk, and Legal teams. </li></ul>You Bring:<ul><li>B.S. or M.S. degree in Computer Science, Engineering, or a related technical field, or equivalent experience may be considered in lieu of degree. </li><li>3–6 years of experience in Cyber Threat Intelligence, Security Operations, or Threat Hunting. </li><li>Proficiency with Recorded Future, CrowdStrike (especially Counter Adversary Module), and dark web intelligence platforms. </li><li>Experience with SIEM, EDR, and SOAR platforms (e.g., Splunk, CrowdStrike, SentinelOne).</li><li>Proficient with forensic tools such as EnCase, FTK, Velociraptor, Volatility, etc. </li><li>Deep understanding of threat actor TTPs, MITRE ATT&amp;CK framework, and intelligence lifecycle.</li><li>Strong knowledge of network protocols, system internals (Windows, Linux), and common attack techniques. </li><li>Experience in multiple intelligence disciplines including: </li></ul><ul><li>Threat Intelligence (TI) </li></ul><ul><li>SecOps Intelligence </li></ul><ul><li>Identity Intelligence </li></ul><ul><li>Dark Web Intelligence </li></ul><ul><li>Surface Web Intelligence </li></ul><ul><li>Social Media Monitoring </li></ul><ul><li>Third Party Intelligence  </li></ul><ul><li>Strong writing skills for producing intelligence reports, threat profiles, and executive summaries. </li></ul>Preferred: <ul><li>Familiarity with TIP platforms, STIX/TAXII feeds, and intel ingestion into SIEM/SOAR tools. </li></ul><ul><li>Certifications such as GCTI, GREM, CTIA, or GCIA. </li></ul><ul><li>Understanding of geopolitical and nation-state threat landscapes. </li></ul><ul><li>Experience contributing to threat hunting and red team exercises. </li></ul>**This is an onsite role at our Manufacturing Facility in Casa Grande, AZ.** <div><div>At Lucid, we don’t just welcome diversity - we celebrate it! Lucid Motors is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, national or ethnic origin, age, religion, disability, sexual orientation, gender, gender identity and expression, marital status, and any other characteristic protected under applicable State or Federal laws and regulations.</div></div><div><div>By Submitting your application, you understand and agree that your personal data will be processed in accordance with our <a href="https://www.lucidmotors.com/s3fs-public/pdf/candidate-privacy-notice.pdf">Candidate Privacy Notice</a>. If you are a California resident, please refer to our <a href="https://www.lucidmotors.com/s3fs-public/pdf/california-candidate-privacy-notice.pdf">California Candidate Privacy Notice</a>.</div><div>To all recruitment agencies: Lucid Motors does not accept agency resumes. Please do not forward resumes to our careers alias or other Lucid Motors employees. Lucid Motors is not responsible for any fees related to unsolicited resumes. </div></div>  <div><div>By Submitting your application, you understand and agree that your personal data will be processed in accordance with our <a href="https://www.lucidmotors.com/s3fs-public/pdf/candidate-privacy-notice.pdf">Candidate Privacy Notice</a>. If you are a California resident, please refer to our <a href="https://www.lucidmotors.com/s3fs-public/pdf/california-candidate-privacy-notice.pdf">California Candidate Privacy Notice</a>.</div><div>To all recruitment agencies: Lucid Motors does not accept agency resumes. Please do not forward resumes to our careers alias or other Lucid Motors employees. Lucid Motors is not responsible for any fees related to unsolicited resumes. </div><div> </div></div>

Lucid Motors sets out to create a car that elevates the human experience and transcends the perceived limitations of space, performance, and intelligence. A car that is intuitive, liberating, and designed for all the ways people get around. Lucid Motors plans to lead in this new era of mobility by returning to the fundamentals of great design &ndash; where every decision we make is in service of the individual. Because when you are no longer bound by convention, you are free to define your own path.

Sr. SOC Analyst – Cyber Threat Intelligence 

<div><div>Leading the future in luxury electric and mobility</div><div>At Lucid, we set out to introduce the most captivating, luxury electric vehicles that elevate the human experience and transcend the perceived limitations of space, performance, and intelligence. Vehicles that are intuitive, liberating, and designed for the future of mobility.</div><div>&nbsp;</div><div>We plan to lead in this new era of luxury electric by returning to the fundamentals of great design – where every decision we make is in service of the individual and environment. Because when you are no longer bound by convention, you are free to define your own experience.</div><div>&nbsp;</div><div>Come work alongside some of the most accomplished minds in the industry. Beyond providing competitive salaries, we’re providing a community for innovators who want to make an immediate and significant impact. If you are driven to create a better, more sustainable future, then this is the right place for you.</div></div>At Lucid Motors, the Senior SOC Analyst, Cyber Threat Intelligence DFIR is responsible for the Security operations, Incident response, Threat Hunting and Cyber Threat Intelligence. This role is essential to strengthening our threat-informed defense posture and providing strategic and tactical intelligence to Security Operations, Incident Response, and Risk teams. The ideal candidate will bring deep experience in threat intelligence lifecycle management, dark web monitoring, identity intelligence, and exposure of enterprise assets across surface, deep, and dark web environments.&nbsp; &nbsp; You Will:<ul><li>Collect, analyze, and operationalize threat intelligence across surface, deep, and dark web sources.&nbsp;</li></ul><ul><li>Use tools such as Recorded Future, CrowdStrike Counter Adversary Module, OSINT, and dark web monitoring platforms to identify emerging threats, campaigns, and threat actor behaviors.&nbsp;</li></ul><ul><li>Perform identity intelligence and account exposure investigations across criminal forums, paste sites, and marketplaces.&nbsp;</li></ul><ul><li>Monitor and assess threats from social media, hacktivist groups, and geopolitical activity.&nbsp;</li></ul><ul><li>Enrich SOC and IR investigations with contextual threat intelligence (IOCs, TTPs, attribution).&nbsp;</li></ul><ul><li>Track and report on threat actors, malware families, exploit trends, and sector-specific targeting.&nbsp;</li></ul><ul><li>Produce periodic threat assessments, intelligence briefings, and alerts for internal stakeholders.&nbsp;</li></ul><ul><li>Collaborate with Detection Engineering to convert intelligence into detections and hunt hypotheses.&nbsp;</li></ul><ul><li>Support intelligence requirements for Security Operations, Incident Response, Risk, and Legal teams.&nbsp;</li></ul>You Bring:<ul><li>B.S. or M.S. degree in Computer Science, Engineering, or a related technical field, or equivalent experience may be considered in lieu of degree.&nbsp;</li><li>3–6 years of experience in Cyber Threat Intelligence, Security Operations, or Threat Hunting.&nbsp;</li><li>Proficiency with&nbsp;Recorded Future, CrowdStrike (especially Counter Adversary Module), and dark web intelligence platforms.&nbsp;</li><li>Experience with SIEM, EDR, and SOAR platforms (e.g., Splunk, CrowdStrike, SentinelOne).</li><li>Proficient with forensic tools such as EnCase, FTK, Velociraptor, Volatility, etc.&nbsp;</li><li>Deep understanding of threat actor TTPs, MITRE ATT&amp;CK framework, and intelligence lifecycle.</li><li>Strong knowledge of network protocols, system internals (Windows, Linux), and common attack techniques.&nbsp;</li><li>Experience in multiple intelligence disciplines including:&nbsp;</li></ul><ul><li>Threat Intelligence (TI)&nbsp;</li></ul><ul><li>SecOps Intelligence&nbsp;</li></ul><ul><li>Identity Intelligence&nbsp;</li></ul><ul><li>Dark Web Intelligence&nbsp;</li></ul><ul><li>Surface Web Intelligence&nbsp;</li></ul><ul><li>Social Media Monitoring&nbsp;</li></ul><ul><li>Third Party Intelligence&nbsp;&nbsp;</li></ul><ul><li>Strong writing skills for producing intelligence reports, threat profiles, and executive summaries.&nbsp;</li></ul>Preferred:&nbsp;<ul><li>Familiarity with TIP platforms, STIX/TAXII feeds, and intel ingestion into SIEM/SOAR tools.&nbsp;</li></ul><ul><li>Certifications such as GCTI, GREM, CTIA, or GCIA.&nbsp;</li></ul><ul><li>Understanding of geopolitical and nation-state threat landscapes.&nbsp;</li></ul><ul><li>Experience contributing to threat hunting and red team exercises.&nbsp;</li></ul>**This is an onsite role at our Manufacturing Facility in Casa Grande, AZ.**&nbsp;<div><div>At Lucid, we don’t just welcome diversity - we celebrate it! Lucid Motors is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, national or ethnic origin, age, religion, disability, sexual orientation, gender, gender identity and expression, marital status, and any other characteristic protected under applicable State or Federal laws and regulations.</div></div><div><div>By Submitting your application, you understand and agree that your personal data will be processed in accordance with our&nbsp;<a href="https://www.lucidmotors.com/s3fs-public/pdf/candidate-privacy-notice.pdf">Candidate Privacy Notice</a>. If you are a California resident, please refer to our&nbsp;<a href="https://www.lucidmotors.com/s3fs-public/pdf/california-candidate-privacy-notice.pdf">California Candidate Privacy Notice</a>.</div><div>To all recruitment agencies:&nbsp;Lucid Motors&nbsp;does not&nbsp;accept agency resumes. Please do not forward resumes to our careers alias or other Lucid Motors employees. Lucid Motors is not responsible for any fees related to unsolicited resumes.&nbsp;</div></div>&nbsp;&nbsp;<div><div>By Submitting your application, you understand and agree that your personal data will be processed in accordance with our <a href="https://www.lucidmotors.com/s3fs-public/pdf/candidate-privacy-notice.pdf">Candidate Privacy Notice</a>. If you are a California resident, please refer to our <a href="https://www.lucidmotors.com/s3fs-public/pdf/california-candidate-privacy-notice.pdf">California Candidate Privacy Notice</a>.</div><div>To all recruitment agencies: Lucid Motors does not accept agency resumes. Please do not forward resumes to our careers alias or other Lucid Motors employees. Lucid Motors is not responsible for any fees related to unsolicited resumes.&nbsp;</div><div>&nbsp;</div></div>

Sr. SOC Analyst – Cyber Threat Intelligence

About the Job

About the Company

Lucid Motors

Similar Jobs

Network Engineer

Network Engineer

Cybersecurity Analyst (Product Security Engineer)

Cybersecurity Analyst (Product Security Engineer)

Senior Cyber Security Specialist - Airport project

Senior Cyber Security Specialist - Airport project

Cybersecurity Engineer (Systems)

Cybersecurity Engineer (Systems)

Information Security Engineer

Information Security Engineer

Associate Operations Cybersecurity Analyst OR Operations Cybersecurity Analyst - Oconee Nuclear Station Engineering

Associate Operations Cybersecurity Analyst OR Operations Cybersecurity Analyst - Oconee Nuclear Station Engineering

IT/OT Network Engineer

IT/OT Network Engineer

EOI - Cybersecurity Expert

EOI - Cybersecurity Expert

Enterprise Security Architect

Enterprise Security Architect

Cyber Security Engineer III (ICS/OT)

Cyber Security Engineer III (ICS/OT)