Cyber Threat Emulation Operator, Senior

Toyota Deutschland GmbH; Plano (TX); On-site; USD 150,000 - 230,000; Full time

Benefits offered by this job

Team Member Vehicle Purchase Discount

Comprehensive health care and wellness

401(k) with company match

Relocation assistance (if applicable)

Job summary

Toyota Financial Services Information Security is seeking a passionate and highly motivated Cyber Threat Emulation Senior Operator to build the next generation of threat emulation capabilities for a global enterprise.

This is a hands-on technical role that will execute adversary simulations, develop AI-assisted tooling, and collaborate with defenders to measurably improve security controls across identity, endpoints, cloud, and applications.

Qualifications

• Experience leading end-to-end security engagements in enterprise environments.
• Strong knowledge of modern attack techniques across identity, endpoints, networks, cloud, apps and AI.
• Experience developing offensive security tooling and automation.

Responsibilities

• Execute end-to-end red team and control test engagements across multiple environments.
• Develop custom offensive security tooling and reusable attack capabilities.
• Build AI-assisted and agentic workflows for reconnaissance, campaign planning, and post-exploitation emulation.
• Mentor other practitioners and collaborate with defenders to improve security controls.

Skills

Red teaming

Adversary simulation

Penetration testing

Offensive security

Security engagements

Communication skills

Education

Bachelor's or equivalent

Tools

Python

AI tooling

Job description

Overview

Who we are

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us.

An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.

Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other workauthorization for this role now or in the future. You must have the right to work in the United States and not requireToyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM
OPT, F-1 CPT, ‘job flexibility benefits’ [also known as I-140 or Adjustment of Status portability], etc.) now or in thefuture. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorshipnow or in the future.

Whowe’relooking for

ToyotaFinancial Services(TFS) Information Security is seeking a passionate and highly motivatedCyber Threat Emulation Senior Operatorto build the next generation of threat emulation capabilities for a global enterprise.

This is a hands-on technical opportunity for an experienced offensive security practitioner who wants to develop new capabilities, not simply operate an existing red team program. You will execute sophisticated adversary simulations while building AI-assisted and agentic tooling that changes how offensive security testing is performed. You will have the opportunity to experiment with emerging attack techniques, develop custom tooling, orchestrate multi-stage attack workflows, and apply artificial intelligence to increase the speed, adaptability, and scale of threat emulation.

This role will contribute tothe TFS threat emulation capability while remainingclose to the keyboard.Working across the global TFS Group companies, you will touch complex enterprise, cloud, identity, application, and AI-enabled environments, to challenge real security controls and work directly with defenders to measurably improve them.

This role is suitedto an operator who enjoys researching emerging tradecraft, building tools, testing ideas in realistic environments, and turning successful prototypes into repeatable offensive security capabilities.

Whatyou’llbe doing

• Execute end-to-end red team and control test engagements that reproduce realistic adversary behaviors across identity, endpoint, network, application, cloud, container, and AI-enabled environments.

• Develop custom offensive security tooling and reusable attack capabilities rather than relying exclusively on commercial testing platforms.

• Build AI-assisted and agentic workflows for reconnaissance, attack-path discovery, campaign planning, vulnerability analysis, payload development, control validation, and post-exploitation emulation.

• Leverage and tune multi-agent systems capable of adapting attack-paths, interpreting results, and coordinating multi-stage adversary simulations at speed and scale.

• Integrate large language models with internal telemetry and threat intelligence to prioritize and drive offensive security workflows.

• Test AI-enabled applications and agentic systems, including model interfaces, retrieval pipelines, tool integrations, authorizationboundaries, data flows, and indirect prompt-injection paths.

• Work directly with SOC analysts, detection engineers, incident responders, and threat intelligence analysts to break, tune, retest, and improve security controls through purple team exercises.

• Stay current on global cyber trends and attacktechniques. Propose new research directions by applying relevant insights to the Toyota environment.

• Mentor other offensive securitypractitioners while remaining actively involved in research, tooling development, and engagement execution.

What you bring

• Extensive experience in red teaming, adversary simulation, penetration testing, or offensive security.

• Demonstrated ability to conduct end-to-end security engagements in an enterprise environment.

• Strong knowledge of modern attack techniques across identity, endpoints, networks, cloud platforms, applications, AI, and security infrastructure.

• Hands-on experience developing offensive security tooling, automation, or agentic workflows.

• Ability to communicate complex technical findings clearly to both technical and non-technical audiences.

• Sound judgment, integrity, and familiarity with the governance and operational safeguards required when conducting offensive security activity.

• Bachelor’s Degree from an accredited institution, or equivalent experience

Added bonusif you have

• Relevant security certification (CRTO,OSCP, OSWE, CISSP)

• Familiarity with security frameworks for attack (MITRE ATT&CK, Cyber Kill Chain), threat modeling (STRIDE, CVSS), andguidance(NIST, PCI).

• Understandingofregulatory issuances,such asCFPB, GLBA andSOX, andtheir applicability to technologies, applications and privacy laws (GDPR & CCPA) and other legal and compliance privacy and information security requirements.

• Advanced degree with a concentration in an IT related area.

Whatwe’llbring

During your interview process, our team can fill you in on all the details of our industry-leading benefits and careerdevelopment opportunities. A few highlights include:

• A work environment built on teamwork, flexibility, and respect
• Professional growth and development programs to help advance your career, as well as tuition reimbursement
• Team Member Vehicle Purchase Discount
• Toyota Team Member Lease Vehicle Program (if applicable)
• Comprehensive health care and wellness plans for your entire family
• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyotaregardless of whether you contribute (if applicable)
• Paid holidays and paid time off
• Referral services related to prenatal services, adoption, childcare, schools and more
• Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
• Relocation assistance (if applicable)

Belonging at Toyota

Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star.

Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.

Have a question, need assistance with your application or do you require any special accommodations? Please send an email to [e-mail].