Senior SIEM/SOAR Engineer & Platform Lead

Toyota North America; Plano (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Relocation assistance

Tuition reimbursement

Health care plan

Job summary

Toyota Financial Services (TFS) Technology is seeking a Lead Cyber Security Engineer to architect, deploy, and sustain SIEM and SOAR platforms. You will oversee log ingestion, detection content, and automation to empower the SOC and cybersecurity teams.

With a focus on scalable security infrastructure, you will lead engineering efforts across on‑prem, cloud, and hybrid environments while mentoring junior engineers and collaborating with stakeholders across Toyota’s North American teams.

Qualifications

• 5+ years in cyber security engineering with hands-on SIEM administration & SOAR development.
• Proficient with multiple SIEM/SOAR platforms (Splunk, Sentinel, Chronicle, Elastic, XSOAR, Phantom, Swimlane).
• Strong scripting in Python and PowerShell for automation and tooling.
• Excellent communication and ability to influence stakeholders across SOC, infra, and leadership.

Responsibilities

• Lead SIEM engineering, platform health, data onboarding, and log parsing across hybrid environments.
• Design, build, and maintain SOAR playbooks and automation to reduce MTTR and MTTD.
• Deploy and manage security agents across on‑prem, cloud, and hybrid endpoints.
• Develop detection rules, data source integrations, and correlation logic to improve signal-to-noise ratio.
• Create automation tooling with Python/PowerShell and integrate security tools via APIs.
• Develop SOPs, runbooks, and standardized practices for incident response and platform maintenance.

Skills

SIEM administration

SOAR development

Log management

Python

PowerShell

Stakeholder collaboration

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Splunk

Microsoft Sentinel

Chronicle

Elastic

Palo Alto XSIAM/XSOAR

Phantom

Swimlane

Job description

Toyota Financial Services (TFS) Technology is seeking a Lead Cyber Security Engineer to architect, deploy, and sustain SIEM and SOAR platforms. You will oversee log ingestion, detection content, and automation to empower the SOC and cybersecurity teams.

With a focus on scalable security infrastructure, you will lead engineering efforts across on‑prem, cloud, and hybrid environments while mentoring junior engineers and collaborating with stakeholders across Toyota’s North American teams.