Cyber Threat Management Senior Associate
Vertage Inc.
A complete application in a minute — tailored resume and cover letter, ready to send.
Job summary
Ford Motor Company is seeking a Cyber Threat Management Senior Associate to join the Product Security Operations Center (PSOC). The role focuses on monitoring, detecting, investigating, and responding to cybersecurity threats across connected vehicles, cloud services, APIs, and embedded automotive systems.
The ideal candidate has hands-on SOC and incident response experience, with cloud security and API security expertise. This position supports 24x7 shift coverage and cross-team collaboration.
Qualifications
- Bachelor's Degree in Cybersecurity, Computer Science, Information Security or related discipline.
- 3–5 years in cybersecurity, security operations or incident response.
- At least 2 years in hands-on SOC or cybersecurity operations.
- Experience coordinating security incidents through the response lifecycle.
- Experience with API security concepts and cloud security operations.
Responsibilities
- Monitor, analyze, and triage security alerts from PSOC tools.
- Investigate incidents across cloud, APIs, vehicle telemetry and embedded systems.
- Support the full incident response lifecycle: identification to closure.
- Analyze logs, alerts, and telemetry to identify threats.
- Coordinate investigations with CIRT, Product Security, Cloud Security, and IT teams.
- Escalate incidents and coordinate mitigation activities as needed.
- Document investigations, findings, and remediation actions.
- Improve detection logic and alerting capabilities.
Skills
Education
Tools
Job description
Location: Allen Park, MI (Fairlane Business Park III)
Work Model: Shift-based 24x7 Operations Environment
Client is seeking a Cyber Threat Management Senior Associate to join its Product Security Operations Center (PSOC). This role is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats affecting connected vehicles, cloud services, APIs, and embedded automotive systems.
The ideal candidate will have experience in Security Operations Center (SOC) environments, incident response, cloud security operations, and API security. This position plays a key role in protecting Ford's connected vehicle ecosystem by analyzing security events, coordinating response activities, and improving detection capabilities across the enterprise.
- Monitor and triage security alerts generated through PSOC monitoring tools.
- Investigate cybersecurity incidents across cloud applications, APIs, vehicle telemetry, and embedded systems.
- Support the full incident response lifecycle, including identification, containment, eradication, recovery, and closure.
- Analyze logs, alerts, and telemetry data to identify potential threats and malicious activity.
- Collaborate with Cyber Incident Response Teams (CIRT), Product Security, Cloud Engineering, and Enterprise IT teams.
- Escalate and coordinate security incidents according to established procedures and response playbooks.
- Conduct root cause analysis and document investigation findings.
- Contribute to the development and enhancement of security monitoring and detection capabilities.
- Assist with alert tuning, threat detection optimization, and operational process improvements.
- Coordinate incident handoffs with global PSOC teams to ensure seamless 24x7 coverage.
- Maintain accurate incident documentation and communicate findings to technical stakeholders.
- Bachelor's Degree in Computer Science, Cybersecurity, Information Security, Engineering, or a related discipline.
- 3-5 years of cybersecurity, security operations, or incident response experience.
- At least 2 years of hands-on SOC or cybersecurity operations experience.
- Experience supporting and coordinating security incidents throughout the response lifecycle.
- Experience investigating security alerts and performing threat triage.
- Experience with API security concepts and security monitoring.
- Exposure to cloud security operations within AWS, Azure, or Google Cloud Platform (GCP).
- Ability to work in a fast-paced, shift-based 24x7 operational environment.
- Cybersecurity Operations
- Security Operations Center (SOC)
- API Security
- Cloud Security Operations
- Identity & Access Management (IAM)
- Security Event Analysis
- SIEM Technologies
- Security Documentation & Reporting
- Experience investigating threats across cloud environments and connected devices.
- Knowledge of vehicle cybersecurity, embedded systems security, or IoT security.
- Experience working with SIEM and SOAR platforms such as:
- Splunk
- QRadar
- Google SecOps
- LogRhythm
- Experience developing or improving runbooks and response playbooks.
- Familiarity with MITRE ATT&CK framework.
- Understanding of automotive cybersecurity concepts and standards:
- ISO/SAE 21434
- UNECE R155
- Experience with alert tuning and detection engineering.
- Security certifications such as:
- Security+
- CySA+
- GIAC Certifications
- AWS Security Specialty
- Azure Security Engineer (AZ-500)
- Google Cloud Security Engineer
The successful candidate will be a SOC Analyst, Security Operations Analyst, Incident Response Analyst, or Cloud Security Analyst with strong experience investigating security incidents and monitoring enterprise environments.
Candidates with experience in API security, cloud security operations, SIEM monitoring, and threat detection will be highly preferred. Automotive cybersecurity experience is a plus but not mandatory. Individuals who demonstrate a strong willingness to learn connected vehicle security and embedded systems will also be considered.
- SOC Analyst II / III
- Security Operations Analyst
- Cybersecurity Analyst
- Cyber Defense Analyst
- Cloud Security Analyst
- Product Security Analyst
- Detection & Response Analyst
- Security Monitoring Analyst
- API Security Analyst
- Automotive Cybersecurity Analyst
- Security Engineer (Operations)
Job Number: 331986
Location: Allen Park, MI (Fairlane Business Park III)
Pay Rate: $48 - $58/hour W2
Client: Ford Motor Company
Work Schedule: Shift-based 24x7 Operations Coverage
Ford Motor Company is seeking a Cyber Threat Management Senior Associate to join its Product Security Operations Center (PSOC). This role is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats impacting connected vehicles, cloud-based services, APIs, and embedded automotive systems.
The ideal candidate will have hands‑on experience in Security Operations (SOC), Incident Response, Threat Detection, Cloud Security Operations, and API Security. This position will work closely with Product Security, Cloud Engineering, Enterprise IT, Vehicle Security, and Cyber Incident Response teams to protect Ford's connected vehicle ecosystem.
- Monitor, analyze, and triage security alerts generated from PSOC monitoring tools.
- Investigate cybersecurity incidents across cloud platforms, APIs, vehicle telemetry, and embedded systems.
- Support the complete incident response lifecycle, including:
- Identification
- Containment
- Remediation
- Recovery
- Closure
- Analyze logs, alerts, and telemetry data to identify malicious activity and security threats.
- Coordinate investigations with Cyber Incident Response Teams (CIRT), Product Security, Cloud Security, and Enterprise IT teams.
- Escalate incidents and coordinate mitigation activities when required.
- Document investigations, findings, root cause analysis, and remediation activities.
- Improve detection logic, security monitoring processes, and alerting capabilities.
- Participate in shift-based monitoring and ensure seamless handoff between global PSOC teams.
- Assist with development and refinement of security runbooks and response playbooks.
- Bachelor's Degree in:
- Cybersecurity
- Computer Science
- Information Security
- Related Technical Discipline
- 3-5 years of cybersecurity experience.
- Minimum 2 years of Security Operations, SOC, or Incident Response experience.
- Experience managing security incidents throughout the incident response lifecycle.
- Strong understanding of threat detection and alert triage.
- Experience with API Security.
- Exposure to cloud security operations.
- Experience investigating security events and analyzing logs.
- Ability to work in a fast-paced 24x7 operational environment.
- Security Operations Center (SOC)
- Cybersecurity Operations
- Security Event Analysis
- API Security
- Cloud Security Operations
- Identity & Access Management (IAM)
- Security Documentation
- Security Monitoring
- Experience with SIEM and SOAR Platforms:
- Splunk
- Microsoft Sentinel
- QRadar
- LogRhythm
- Google SecOps
- CrowdStrike SIEM
- Familiarity with:
- MITRE ATT&CK Framework
- Threat Hunting
- Detection Engineering
- Alert Tuning
- Automotive cybersecurity knowledge.
- Embedded systems security experience.
- Connected vehicle security exposure.
- Experience with vehicle telemetry monitoring.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
