Security Operations Center (SOC) Analyst - L1

Toyota North America, through Toyota Financial Services, is seeking a Security Operations Center (SOC) Analyst to monitor and investigate security alerts across SIEM, endpoint, email, cloud, and network security platforms. The role supports incident detection and response, threat analysis, compliance activities, and improvements to SOC processes and procedures.

What you'll do:

• Monitor security events and alerts generated from SIEM, EDR, email security, cloud security, and network security platforms
• Perform initial triage of security alerts to determine legitimacy, severity, and potential business impact
• Investigate suspicious activities and indicators of compromise (IOCs)
• Document investigative findings and actions taken in accordance with established procedures
• Escalate potential security incidents to senior analysts or incident response teams as required
• Respond to incidents after hours or as needed by on-call rotation
• Assist in the identification, containment, and remediation of cybersecurity incidents
• Participate in incident response activities under the guidance of senior analysts
• Gather and preserve relevant evidence for investigations
• Support post-incident documentation and lessons learned activities
• Review threat intelligence reports and security advisories
• Identify suspicious patterns, known threat indicators, and emerging threats that may impact Toyota Financial Services

What they're looking for:

• You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM OPT, F-1 CPT, ‘job flexibility benefits' [also known as I-140 or Adjustment of Status portability], etc.) now or in the future
• • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field; or equivalent work experience
• • 0-2 years of cybersecurity, information security, IT operations, help desk, network administration, or related experience
• • Security Operations Center functions and processes
• • Network fundamentals (TCP/IP, DNS, DHCP, HTTP/S)
• • Windows and Linux operating systems
• • Cybersecurity threats, attack techniques, and common vulnerabilities
• • Security monitoring and logging concepts
• • Identity and access management principles
• • Endpoint security technologies
• • Cloud security fundamentals (AWS and Microsoft 365 preferred)
• • CrowdStrike Falcon

Benefits:

• A work environment built on teamwork, flexibility, and respect
• Professional growth and development programs to help advance your career, as well as tuition reimbursement
• Team Member Vehicle Purchase Discount
• Toyota Team Member Lease Vehicle Program (if applicable)
• Comprehensive health care and wellness plans for your entire family
• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute (if applicable)
• Paid holidays and paid time off
• Referral services related to prenatal services, adoption, childcare, schools and more
• Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
• Relocation assistance (if applicable)