Senior Incident Response & Digital Forensics Analyst

Toyota Tsusho Systems Corporation; Plano (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

Toyota Tsusho Systems US, Inc. seeks an experienced Incident Response Analyst to join the TRRAC team. You will lead IR, perform digital forensics across Windows, Linux, macOS, and mobile platforms, and drive proactive threat hunting and intelligence activities.

You will craft reports, coordinate with the 24/7 SOC, and help improve playbooks and SOPs. Responsibilities include on-call incident handling, collaboration with multiple cybersecurity teams, and contributing to tabletop exercises while

Qualifications

• Minimum 3–5 years hands-on incident response and digital forensics.
• Experience acting as Incident Commander in high-pressure incidents.
• Familiarity with security frameworks (NIST, HIPAA, ISO, OWASP).
• Proficient with DFIR tooling and scripting for automation.

Responsibilities

• Lead incident response activities following NIST Cybersecurity Framework across all phases.
• Respond to cyber incidents impacting corporate and partner ecosystems.
• Perform digital forensic investigations on diverse devices (Windows, Linux, macOS, mobile).
• Prepare forensic reports and incident communications for executives.
• Participate in 24/7 on-call rotation for incident coverage.
• Develop and improve incident response playbooks and training materials.

Skills

Incident response

Digital forensics

Threat hunting

Scripting (Python)

Malware analysis

Education

Bachelor's degree in Cybersecurity or related field

Tools

Autopsy

The Sleuth Kit

Volatility

Magnet Axiom

FTK

Job description

Toyota Tsusho Systems US, Inc. seeks an experienced Incident Response Analyst to join the TRRAC team. You will lead IR, perform digital forensics across Windows, Linux, macOS, and mobile platforms, and drive proactive threat hunting and intelligence activities.

You will craft reports, coordinate with the 24/7 SOC, and help improve playbooks and SOPs. Responsibilities include on-call incident handling, collaboration with multiple cybersecurity teams, and contributing to tabletop exercises while