Cyber Incident Response Analyst — Forensics & Threat Hunting

Toyota Tsusho Systems US, Inc.; Plano (TX); On-site; USD 95,000 - 130,000; Full time

Job summary

Toyota Tsusho Systems US, Inc. is seeking an Incident Response Analyst to join the TRRAC team. You will lead IR activities, perform forensics across multiple platforms, and drive threat hunting and intelligence initiatives.

You will collaborate with the 24/7 SOC, vulnerability management, and insider risk teams, developing playbooks and training materials while staying current on emerging threats. This role requires on-site presence in Plano, TX.

Qualifications

• 3–5 years of hands-on incident response and digital forensics experience.
• Proven Incident Commander experience in high-pressure incidents.
• Strong knowledge of Windows, Linux, and macOS internals for monitoring and threat detection.
• Experience with cloud security incident response and threat mitigation.
• Malware analysis (behavioral and static) and basic cryptanalysis.
• Familiarity with security frameworks (NIST, HIPAA, ISO, OWASP, etc.).
• Proficient with DFIR tools (Autopsy, The Sleuth Kit, Volatility, Magnet Axiom, FTK, etc.).
• Scripting in Python, PowerShell, and Bash for automation.
• Excellent communication across technical teams and stakeholders.

Responsibilities

• Conduct incident response per NIST CSF across all phases.
• Respond to cyber incidents affecting corporate environments, plants, third parties, dealerships, and RSOC customers.
• Perform digital forensics on Windows, Linux, macOS, and mobile devices.
• Maintain an Always Be Timelining (ABT) approach with active timelines.
• Support threat hunting and threat intelligence activities.
• Analyze emerging threats, attacker TTPs, and track threat actors.
• Collaborate with the 24/7 SOC and other teams.
• Prepare forensic reports, incident communications, and executive updates.
• Participate in weekly on-call rotation for 24/7 incident coverage.
• Conduct malware analysis (behavioral and static).
• Help develop, refine, and maintain IR playbooks and SOPs.
• Participate in tabletop exercises to test workflows.
• Stay current on threats and industry best practices.

Skills

Windows/Linux/macOS internals

Cloud security incidents

Threat hunting

Python/PowerShell/Bash

Communication skills

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Autopsy

The Sleuth Kit

Volatility

Magnet Axiom

FTK

Job description

Toyota Tsusho Systems US, Inc. is seeking an Incident Response Analyst to join the TRRAC team. You will lead IR activities, perform forensics across multiple platforms, and drive threat hunting and intelligence initiatives.

You will collaborate with the 24/7 SOC, vulnerability management, and insider risk teams, developing playbooks and training materials while staying current on emerging threats. This role requires on-site presence in Plano, TX.