Cyber Incident Response Lead: Strategic Security Leader

Toyota; Plano (TX); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Health care benefits

Tuition reimbursement

Vehicle discount programs

Retirement plan

Job summary

Toyota Financial Services (TFS) Technology seeks a Cyber Incident Response Lead to guide responses to cybersecurity events. This leadership role oversees response activities, coordinates with stakeholders, and strengthens Toyota’s posture through containment, investigation, escalation, and resolution of security incidents.

The ideal candidate has 7+ years in information security, proven leadership, strong communication, and expertise in MITRE ATT&CK, SIEM tools, and incident playbooks.

Qualifications

• Bachelor’s degree or equivalent experience in information security or related field.
• 7+ years of progressive information security experience with incident response.
• Proven leadership managing technical and/or non-technical teams.
• Strong root-cause analysis, incident timeline reconstruction, MITRE ATT&CK fluency.
• Deep understanding of cyber threats, SIEM analytics, and risk management.
• Excellent communication to executives and diverse stakeholders.
• Experience creating SOPs, playbooks, and training materials.
• Familiarity with ISO 27001, NIST, SOX and regulatory requirements.
• Relevant certifications preferred (CISSP, GCIH, GSEC, OSCP, CYSA+).

Responsibilities

• Lead incident response investigations and provide guidance to analysts.
• Oversee triage, containment, analysis, escalation, and remediation.
• Collaborate with Security Operations, IT, Risk, and leaders to drive resolution.
• Develop and refine incident response playbooks and tools.
• Facilitate lessons learned and integrate insights into programs.
• Identify systemic risks and inform security program enhancements.
• Ensure regulatory and internal policy compliance with documentation.
• Drive continuous improvement in response processes and governance.
• Represent IR in cross-functional security forums and strategy discussions.

Skills

Leadership

Incident response

Threat hunting

Communication

SOP development

Education

Bachelor's degree in Computer Science or related field

Tools

MITRE ATT&CK

Splunk

Exabeam

Job description

Toyota Financial Services (TFS) Technology seeks a Cyber Incident Response Lead to guide responses to cybersecurity events. This leadership role oversees response activities, coordinates with stakeholders, and strengthens Toyota’s posture through containment, investigation, escalation, and resolution of security incidents.

The ideal candidate has 7+ years in information security, proven leadership, strong communication, and expertise in MITRE ATT&CK, SIEM tools, and incident playbooks.