Detection & Response Analyst

Vaga não está no LinkedIn

🕒 Ontem

🤠 Texas – Remoto

🤠 Texas – Remote

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

🧐 Analista

👻 Score fantasma 10%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Toyota Tsusho Europe

SiteLinkedInTodas as Vagas

1001 - 5000 funcionários

Fundada em 1968

🚘 Automotivo

💼 Consultoria

🏭 Manufatura

Automotive • Consulting • Manufacturing

A Toyota Tsusho Europe é uma filial da Toyota Tsusho Systems (TTS) que se especializa em fornecer soluções de TI personalizadas projetadas para melhorar o crescimento dos negócios e a eficiência operacional. A empresa se concentra em criar estratégias e tecnologias inovadoras de TI que apoiam as operações globais do Grupo Toyota em diversos setores. Além de serviços de nuvem e soluções de segurança, a TTS oferece terceirização de benefícios aos funcionários e soluções integradas para indústrias de manufatura.

Descrição

• Work in a 24x7 Cyber Fusion Center providing monitoring and detection/response services. • Work various 10-hour shifts, including weekends and day and night shifts; shifts rotate quarterly. • Leverage SIEM to query logs and correlate across multiple log sources. • Detect and respond to security incidents using detection/response platforms. • Triage security incidents and perform in-depth analysis using cyber threat intelligence, intrusion detection systems, firewalls, and other boundary protection devices. • Escalate cybersecurity events according to playbooks and standard operating procedures. • Support Incident Response efforts, including providing counsel, working with the IR team, stakeholders, and customers to drive remediation. • Assist with containment and remediation of threats during incidents; track incidents in the internal ticketing system. • Support Agentic SOC development through feedback, tuning, and feature requests for engineering. • Conduct threat hunting based on internal and external threat intelligence. • Assist with service requests from customers and internal teams. • Identify, recommend, coordinate, and deliver timely knowledge to support teams. • Report information, updates, project progress, problems, schedule changes, resource needs, and scope changes to supervisors and upper management. • Contribute to documentation, standardized processes, procedures, and playbooks. • Establish repeatable and continuously improving processes with the team. • Mentor and train team members as needed. • Perform other tasks and responsibilities assigned by leadership. • Toyota Tsusho Systems US, Inc. develops IT solutions and supports a secure, resilient Toyota global value chain.

🎯 Requisitos

• At least 3 years of cybersecurity experience with a focus on Incident Detection, Incident Response and/or Security Operations. • BA/BS in Computer Science, Information Security, or Information Systems or equivalent related work experience. • Experience interfacing with internal and external customers, providing remediation actions to non-technical audiences. • Working knowledge of enterprise-level security technologies such as SIEM and ticketing systems. • Experience in a highly collaborative environment with a focus on project delivery and desired business outcomes. • Experience with SIEM platforms, enterprise intrusion prevention systems, endpoint detection and response tools, and other security products. • Experience supporting large scale incident investigations. • Experience interfacing with a variety of cybersecurity teams, such as red team, cyber threat intelligence, and data loss prevention. • Security certifications such as Security+, CYSA+, CASP+, GCFA, GCIH, or GCFE. • Strong technical background in security, network, infrastructure, AI, cloud, and applications. • Understanding of AI, AI Security, and its practical applications. • Knowledge of risk assessment tools, technologies, and methods. • Firm grasp of networking and hacking concepts. • Expertise in designing secure networks, systems, and application architectures. • Knowledge of common web application attacks including SQL injection, cross-site scripting, invalid inputs, and forceful browsing. • Proficient knowledge of DNS, HTTP, SMB, and how common protocols and applications work at the network level. • Proficient with SIEM technologies such as Splunk, Microsoft Sentinel, or other SIEM tools. • Detail-oriented and analytical skills. • Problem-solving skills. • Proficient with Microsoft Office and documentation skills, including Word, Excel, and PowerPoint.