Detection & Response Analyst

Job not on LinkedIn

🔥 0 minutes ago

🤠 Texas – Remote

🤠 Texas – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🧐 Analyst

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Toyota Tsusho Europe

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1968

🚘 Automotive

💼 Consulting

🏭 Manufacturing

Automotive • Consulting • Manufacturing

Toyota Tsusho Europe is a branch of Toyota Tsusho Systems (TTS) that specializes in providing customized IT solutions designed to enhance business growth and operational efficiency. The company focuses on creating innovative IT strategies and technologies that support the global operations of the Toyota Group across various sectors. In addition to cloud services and security solutions, TTS offers employee benefit outsourcing and integrated solutions for manufacturing industries.

📋 Description

• Work in a 24x7 Cyber Fusion Center providing monitoring and detection/response services. • Work various 10-hour shifts, including weekends and day and night shifts; shifts rotate quarterly. • Leverage SIEM to query logs and correlate across multiple log sources. • Detect and respond to security incidents using detection/response platforms. • Triage security incidents and perform in-depth analysis using cyber threat intelligence, intrusion detection systems, firewalls, and other boundary protection devices. • Escalate cybersecurity events according to playbooks and standard operating procedures. • Support Incident Response efforts, including providing counsel, working with the IR team, stakeholders, and customers to drive remediation. • Assist with containment and remediation of threats during incidents; track incidents in the internal ticketing system. • Support Agentic SOC development through feedback, tuning, and feature requests for engineering. • Conduct threat hunting based on internal and external threat intelligence. • Assist with service requests from customers and internal teams. • Identify, recommend, coordinate, and deliver timely knowledge to support teams. • Report information, updates, project progress, problems, schedule changes, resource needs, and scope changes to supervisors and upper management. • Contribute to documentation, standardized processes, procedures, and playbooks. • Establish repeatable and continuously improving processes with the team. • Mentor and train team members as needed. • Perform other tasks and responsibilities assigned by leadership. • Toyota Tsusho Systems US, Inc. develops IT solutions and supports a secure, resilient Toyota global value chain.

🎯 Requirements

• At least 3 years of cybersecurity experience with a focus on Incident Detection, Incident Response and/or Security Operations. • BA/BS in Computer Science, Information Security, or Information Systems or equivalent related work experience. • Experience interfacing with internal and external customers, providing remediation actions to non-technical audiences. • Working knowledge of enterprise-level security technologies such as SIEM and ticketing systems. • Experience in a highly collaborative environment with a focus on project delivery and desired business outcomes. • Experience with SIEM platforms, enterprise intrusion prevention systems, endpoint detection and response tools, and other security products. • Experience supporting large scale incident investigations. • Experience interfacing with a variety of cybersecurity teams, such as red team, cyber threat intelligence, and data loss prevention. • Security certifications such as Security+, CYSA+, CASP+, GCFA, GCIH, or GCFE. • Strong technical background in security, network, infrastructure, AI, cloud, and applications. • Understanding of AI, AI Security, and its practical applications. • Knowledge of risk assessment tools, technologies, and methods. • Firm grasp of networking and hacking concepts. • Expertise in designing secure networks, systems, and application architectures. • Knowledge of common web application attacks including SQL injection, cross-site scripting, invalid inputs, and forceful browsing. • Proficient knowledge of DNS, HTTP, SMB, and how common protocols and applications work at the network level. • Proficient with SIEM technologies such as Splunk, Microsoft Sentinel, or other SIEM tools. • Detail-oriented and analytical skills. • Problem-solving skills. • Proficient with Microsoft Office and documentation skills, including Word, Excel, and PowerPoint.