Security Operations Center (SOC) Analyst III

Toyota Motors - Plano, TX

Full-time - Mid Level

Plano, TX

Transportation Equipment Manufacturing

About the position

The Security Operations Center (SOC) Analyst III role at Toyota is a critical position responsible for maintaining the security posture of the organization through effective monitoring and response to security incidents. This role is part of a hybrid SOC that operates 24x7x365, ensuring that security alerts and notifications are promptly addressed. The SOC Analyst will engage in various incident response activities, including alert analysis, triage, and response, while also reviewing and acting on Threat Intelligence related to Indicators of Compromise (IOCs) and other operationally significant information. The position requires a comprehensive understanding of SOC operations, including the network, servers, and applications, both physical and virtual. In this role, the SOC Analyst will be tasked with performing end-to-end SOC analysis, which involves uncovering attack vectors that may involve malware, data exposure, phishing, and social engineering methods. The ideal candidate will be self-directed, organized, and possess strong communication skills, both verbal and written, to effectively convey industry and stakeholder requirements into scalable and performance-driven solutions. The SOC Analyst will also be responsible for continuous monitoring of security alerts from various sources, including SIEM, IDS/IPS, firewalls, and endpoint protection tools, ensuring that any potential threats are swiftly identified and mitigated. The SOC Analyst will collaborate closely with other team members and departments to ensure comprehensive security coverage, manage security monitoring tools, and prepare regular reports on security incidents and trends for management review. This position is essential in supporting Toyota's commitment to maintaining a secure environment for its operations and customers, contributing to the overall mission of delivering innovative and high-quality solutions.

Responsibilities

• Continuously monitor security alerts from various sources, including SIEM, IDS/IPS, firewalls, and endpoint protection tools.
• Perform escalated triage of security incidents, determine their severity, and escalate as necessary.
• Analyze and investigate potential security threats and vulnerabilities.
• Document incidents, actions taken, and outcomes in a clear and concise manner.
• Work closely with other SOC team members and departments to ensure comprehensive security coverage.
• Configure and manage security monitoring tools to ensure optimal performance.
• Prepare regular reports on security incidents and trends for management review.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent years of experience in the role.
• 7+ years of progressive, broad-based Information Security (IS) experience participating in projects and playing a key role toward successful security operations.
• Strong understanding of Cyber Threat TTPs, Threat Hunt, and the application of the MITRE Attack Framework.
• Strong experience supporting 24x7x365 SOC operations including alert and notification activities, analysis/triage/response, and review and action on Threat Intel for IOCs.
• Strong experience and understanding of event timeline analysis and correlation of events between log sources.
• Strong experience with an enterprise SIEM (i.e. Splunk, Exabeam, Chronicle, etc.) or security analytics solution and understanding of security incident response processes.
• Extensive experience with triage and resolution of SOC tasks, including vulnerability announcements, phishing email review, and Tier 1 IR support.

Nice-to-haves

• Relevant certifications such as GSEC, OSCP, GCIH, etc.
• Experience with global security operations and response.

Benefits

• Paid holidays
• Relocation assistance
• Health insurance
• Flexible spending account
• Tuition reimbursement
• Paid time off
• Flextime
• 401(k) matching