Product Security Operations Center Analyst

Lincoln Motor Company; Dearborn (MI); Hybrid; USD 85,000 - 193,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Tuition assistance

Vehicle discount program

Paid time off and holidays

Employee resource groups

Job summary

Ford Motor Company in Michigan seeks a cybersecurity operations specialist to triage alerts, coordinate incidents, and improve monitoring workflows for connected vehicles and cloud services.

The role supports cross-functional teams across regions, focusing on API security, cloud security operations, and rapid incident resolution in a 24x7 environment.

Qualifications

• Bachelor’s degree in CS, cybersecurity or engineering or equivalent experience.
• 2+ years in cybersecurity or security operations.
• Understanding of incident response lifecycles and escalation.

Responsibilities

• Perform daily PSOC alert triage and incident coordination.
• Investigate security events across cloud and embedded vehicle stacks.
• Collaborate with cross-region PSOC teams for continuity.
• Identify friction points to improve detection and response workflows.
• Coordinate with CIRT, product development and IT to execute playbooks.

Skills

Cybersecurity

API security

Cloud security

Incident response

Shift readiness

Written communication

Education

Bachelor's degree in CS/ cybersecurity/ engineering

Job description

We are the movers of the world and the makers of the future. We get up every day, roll up our sleeves and build a better world -- together. At Ford, we're all a part of something bigger than ourselves. Are you ready to change the way the world moves?

Enterprise Technology plays a critical part in shaping the future of mobility. If you're looking for the chance to leverage advanced technology to redefine the transportation landscape, enhance the customer experience and improve people's lives, this is the opportunity for you. Join us and challenge your IT expertise and analytical skills to help create vehicles that are as smart as you are.

In this position

Reporting to the Manager of Monitoring Operations, this role focuses on alert triage, incident support, and continuous improvement of monitoring processes. We are seeking candidates with a solid cybersecurity foundation, including API security experience, along with embedded-vehicle exposure or a demonstrated aptitude and eagerness to learn. You will partner with cloud, vehicle, enterprise, incident-response, and global PSOC teams to help ensure effective investigation and resolution of security events affecting connected vehicles and the cloud services that power them.

What You’ll Do

• Operational Monitoring and Incident Response: Perform daily PSOC alert triage and support incident coordination, containment, remediation, recovery, and closure.
• Cloud & Embedded Investigation and Resolution: Support investigations of security events across cloud application stacks and embedded vehicle architectures using available logging and telemetry.
• Global PSOC Collaboration and Continuity: Partner with PSOC teams across regions to deliver consistent monitoring, investigation, and incident-response services; maintain effective continuity and handoffs for active security events.
• Operational Improvement and Feedback Loop: Surface operational friction points and provide feedback to help improve detection logic, tooling, and response workflows.
• Cross-Functional Partnership: Collaborate closely with the Cyber Incident Response Team (CIRT), Product Development, and Enterprise IT to execute response playbooks and coordinate complex mitigations.

You’ll have

• Bachelor's degree in Computer Science, Cybersecurity, or Engineering, OR a combination of education and experience.
• 2+ years in cybersecurity, security operations, or a related technical field.
• Working understanding of incident response lifecycles, escalation, and incident management practices.
  • Experience with API security and exposure to cloud security operations on one or more major cloud platforms, including logging, monitoring, identity, and response workflows.
  • Ability to work effectively in a fast-paced 24x7 operations environment, including shift-based coverage.
  • Clear written and verbal communication for documenting incidents and coordinating with technical teams.

Even better, you may have

• Embedded vehicle cybersecurity exposure, or a demonstrated aptitude and eagerness to learn.

As an established global company, we offer the benefit of choice. You can choose what your Ford future will look like: will your story span the globe, or keep you close to home? Will your career be a deep dive into what you love, or a series of new teams and new skills? Will you be a leader, a changemaker, a technical expert, a culture builder…or all of the above? No matter what you choose, we offer a work life that works for you, including:

• Immediate medical, dental, vision and prescription drug coverage
• Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more
• Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more
• Vehicle discount program for employees and family members and management leases
• Tuition assistance
• Established and active employee resource groups
• Paid time off for individual and team community service
• A generous schedule of paid holidays, including the week between Christmas and New Year's Day
• Paid time off and the option to purchase additional vacation time.

For a detailed look at our benefits, click here: https://fordcareers.co/GSR

This position is a range of salary grade(s) 6-8 | $85,400 - $192,900

• Note: This is a hybrid role, you are expected to relocate if you are not within commutable distance, and responsible to be on site 4 days a week

Visa sponsorship is not available for this position.

Candidates for positions with Ford Motor Company must be legally authorized to work in the United States. Verification of employment eligibility will be required at the time of hire.

We are an Equal Opportunity Employer committed to a culturally diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity, disability status or protected veteran status. In the United States, if you need a reasonable accommodation for the online application process due to a disability, please call 1-888-336-0660.