Role Overview:

Lucid Motors is seeking a Senior Homologation Engineer to lead all vehicle certification activities for the Gulf region. Based in Riyadh, this role will support regulatory compliance activities across Gulf markets and will serve as the primary regional authority interface with SASO, MOIAT, GSO, and associated agencies.

The position also acts as the key homologation and regulatory focal point between the Middle East operations and Lucid Motors’ headquarters in the United States, ensuring alignment on certification strategy, timing, and technical decisions.

Key Responsibilities:

Gulf Homologation & Regulations:

• Lead homologation strategy, planning, and execution for all Lucid vehicles destined for Gulf markets.
• Manage certification activities in accordance with GSO standards, SASO regulations, and MOIAT requirements.
• Maintain deep expertise in Gulf regulatory frameworks and proactively track regulatory changes, assessing business and product impact.
• Act as the primary point of contact for regional authorities, certification bodies, and technical services.

Head Office Interface (U.S.):

• Serve as the single regional window to Lucid Motors’ U.S. headquarters for all homologation‑related topics.
• Coordinate with the US teams to align certification timelines, test strategies, and technical documentation.
• Communicate regional regulatory constraints, risks, and opportunities clearly to global stakeholders and leadership.
• Support global change‑management processes by ensuring product changes are evaluated and approved from a Gulf homologation perspective.

Manufacturing & Plant Support:

• Support plant operations by conducting and overseeing first‑off‑the‑line (FOTL) checks to verify compliance with approved regulatory configurations.
• Support conformity‑of‑production (CoP) activities, audits, and inspections related to Gulf certifications.
• Work closely with quality, manufacturing, and launch teams to ensure smooth vehicle release and ongoing compliance.

Documentation & Compliance Management:

• Own and maintain all homologation documentation, test reports, approvals, and certificates for Gulf markets.
• Support audits, authority inspections, and regulatory inquiries.
• Provide expert guidance on certification implications for product updates, variants, and derivative models.

Qualifications:

• Bachelor’s degree in Electrical Engineering, Power Engineering, Electrical and Electronic Engineering and 5 years of professional experience.
• Significant experience in automotive homologation, regulatory affairs, or vehicle compliance, ideally in a senior or lead role.
• Strong working knowledge of GSO, SASO, and MOIAT certification processes.
• Proven ability to work independently with full regional responsibility while influencing cross‑functional global teams.

Preferred Experience & Skills:

• Experience working with multinational engineering teams.
• Experience with EV homologation and regulatory requirements.
• Background supporting manufacturing plants or pre‑series/launch activities.
• Familiarity with US (FMVSS) and EU (UN ECE and EU EC) certification
• Familiarity with conformity‑of‑production (CoP) frameworks.
• Strong stakeholder‑management, communication, and leadership skills.
• Fluent Arabic speaker

Role Summary

We are seeking a Lead SOC Validation & Adversary Simulation Engineer to strengthen the effectiveness of our Security Operations Center (SOC / VSOC) by continuously validating detections, response workflows, and telemetry using adversary-informed testing techniques.

This role is SOC-owned and SOC-driven. The primary objective is to improve detection fidelity, reduce blind spots, and increase SOC readiness across vehicle, cloud, and other environments. Adversary simulation and Purple Team techniques are used as methods to harden SOC operations not as standalone Red Team activities.

Key Responsibilities

1. SOC Detection Validation & Assurance (Primary Focus)

• Own continuous validation of SOC detections across:
• Vehicle telemetry and in-vehicle IDS
• Telematics and backend services
• Cloud APIs, and other supporting systems
• Validate alerts against realistic attacker behavior, not synthetic rules
• Identify:
• Detection gaps
• Signal quality issues
• Excessive false positives or low-value alerts
• Partner with SOC engineers to improve alert logic, correlation, and response playbooks
1. Adversary Simulation in Support of SOC
• Design controlled adversary simulations to test SOC capabilities:
• API misuse and abuse
• Lateral movement
• Unauthorized diagnostics or ECU access
• Align scenarios to MITRE ATT&CK (Cloud API + Automotive)
• Coordinate with Red Team only when advanced exploitation is required
2. SOC Telemetry & Signal Engineering
• Work with platform and product teams to:
• Improve log coverage and quality
• Define high-value security signals
• Reduce noisy or redundant telemetry
• Influence what gets logged, where, and why—from ECUs to cloud services
• Help SOC prioritize telemetry based on risk and detection value
3. Incident Readiness & Response Validation
• Validate SOC incident response workflows through:
• Detection-driven exercises
• Tabletop scenarios informed by real attack paths
• Measure and improve:
• Mean Time to Detect (MTTD)
• Mean Time to Triage (MTTT)
• Mean Time to Respond (MTTR)
• Ensure SOC procedures align with real attack timelines
4. Threat Modeling & Risk Alignment
• Leverage TARA / threat-modeling outputs to prioritize SOC coverage
• Ensure SOC monitoring aligns with:
• ISO/SAE 21434
• UNECE R155/R156
• Translate detection gaps into risk-based narratives for leadership and auditors
• Support audit evidence by demonstrating validated monitoring effectiveness
5. Automation & Continuous SOC Validation
• Build or enhance SOC validation automation, including:
• Detection testing frameworks
• Alert replay and validation pipelines
• Coverage and maturity dashboards
• Integrate validation workflows into:
• SIEM
• SOAR
• CI/CD where applicable
• Reduce manual SOC testing and increase repeatability
6. Metrics, Reporting & Leadership Communication
• Define SOC-focused KPIs such as:
• ATT&CK coverage by detection
• Detection efficacy over time
• Reduction in blind spots
• Produce clear SOC maturity and readiness reports
• Communicate findings to:
• SOC leadership
• Product security
• Engineering stakeholders

Required Qualifications

Technical Experience

• Cybersecurity with strong SOC, detection engineering, or incident response experience
• Deep understanding of:
• SOC operations and alert lifecycle
• Detection engineering and signal tuning
• Adversary techniques and kill chains
• Experience working with:
• SIEM and SOC tooling
• Cloud and API monitoring
• Network and system telemetry
• Strong scripting or automation skills (Python, Go, C)

Leadership & Collaboration

• Proven experience leading SOC improvement initiatives
• Ability to influence detection priorities across teams
• Strong written and verbal communication skills
• Comfortable presenting to leadership and auditors