Incident Response Lead – Forensics & Threat Hunting

Toyota Tsusho Systems Corporation; Oregon; Hybrid; USD 90,000 - 140,000; Full time

Job summary

Toyota Tsusho Systems US, Inc. seeks an experienced Incident Response Analyst to join the TRRAC team, focusing on digital forensics, threat hunting, and proactive threat intelligence.

You will coordinate with the 24/7 SOC to respond to security incidents across corporate environments, manufacturing plants, and partners. The role requires 3–5 years in incident response and forensics, strong Windows/Linux/macOS internals knowledge, and automation scripting with Python, PowerShell, or Bash.

Qualifications

• 3–5 years hands-on incident response and digital forensics experience.
• Ability to act as Incident Commander in a team during high-pressure incidents.
• Strong expertise in Windows, Linux, macOS internals for monitoring and threat detection.
• Experience with cloud security incident response and threat mitigation.
• Proficient in malware analysis (behavioral and static) and basic cryptanalysis.
• Familiarity with security frameworks (NIST, HIPAA, ISO, OWASP).
• Proficient in DFIR tools and scripting for automation.

Responsibilities

• Lead incident response activities across detection, containment, eradication, and recovery.
• Coordinate with 24/7 SOC and other security teams; produce forensic reports.
• Conduct digital forensics investigations on diverse devices (Windows, Linux, macOS, mobile).
• Support threat hunting, threat intelligence, and tooling improvements.
• Develop, refine, and maintain incident response playbooks and SOPs.

Skills

Incident response

Digital forensics

Windows

Linux

macOS

Cloud security

Malware analysis

Scripting (Python)

PowerShell

Education

Bachelor's degree in Cybersecurity/related field

Tools

Autopsy

The Sleuth Kit

Volatility

Magnet Axiom

FTK

Job description

Toyota Tsusho Systems US, Inc. seeks an experienced Incident Response Analyst to join the TRRAC team, focusing on digital forensics, threat hunting, and proactive threat intelligence.

You will coordinate with the 24/7 SOC to respond to security incidents across corporate environments, manufacturing plants, and partners. The role requires 3–5 years in incident response and forensics, strong Windows/Linux/macOS internals knowledge, and automation scripting with Python, PowerShell, or Bash.