Senior SOC Lead: Threat Detection & Incident Response

Toyota North America; Plano (TX); On-site; USD 95,000 - 130,000; Full time

Benefits offered by this job

Comprehensive health care and wellness

Team Member Vehicle Purchase Discount

Relocation assistance (if applicable)

Job summary

Toyota North America is seeking a skilled SOC Analyst III to join the Security Operations Center. You will lead advanced threat detection, investigate complex incidents, and mentor junior staff across endpoints, networks, cloud, and identity environments.

You will design and tune detection content, coordinate response efforts, and collaborate with IT, engineering, and business teams to strengthen security posture. Strong MITRE ATT&CK knowledge and SIEM/EDR experience required.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, CS or equivalent.
• 5+ years in cybersecurity operations, IR, threat hunting, or related field.
• Experience investigating advanced threats across endpoint, network, cloud, and identity.
• Strong understanding of MITRE ATT&CK framework.
• Experience with SIEM, EDR/XDR, threat intel, and log analysis.
• Excellent analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication.
• Industry certifications such as CISSP, GCIH, GCFA, GCIA, CySA+.

Responsibilities

• Lead threat detection and monitoring across multiple platforms.
• Investigate and validate cybersecurity threats and suspicious activity.
• Perform threat hunting to detect emerging threats.
• Develop detection logic, use cases, and alert content.
• Lead complex incident investigations across endpoint, network, cloud, and identity.
• Perform root cause analysis and assess scope and impact.
• Coordinate containment, eradication, and recovery with stakeholders.
• Document findings and lessons learned.
• Evaluate and tune monitoring technologies to reduce false positives.
• Onboard new log sources and security tools.
• Support automation initiatives to improve SOC efficiency.
• Develop and maintain SOC playbooks and processes.
• Provide mentorship to Tier 1/2 analysts.
• Escalate complex investigations and collaborate with IT/business teams.
• Prepare incident summaries, metrics, and leadership reports.

Skills

Incident Response

Threat Hunting

Detection Engineering

Security Monitoring

Malware Analysis

Security Automation

Risk Assessment

Technical Leadership

Process Improvement

Cross-Functional Collaboration

Education

Bachelor’s degree in Cybersecurity

Bachelor’s degree in Information Technology

Bachelor’s degree in Computer Science

Industry certifications (CISSP, GCIH, GCFA, GCIA, CySA+)

Tools

SIEM

EDR/XDR

Threat Intelligence

Log Analysis Platforms

Job description

Toyota North America is seeking a skilled SOC Analyst III to join the Security Operations Center. You will lead advanced threat detection, investigate complex incidents, and mentor junior staff across endpoints, networks, cloud, and identity environments.

You will design and tune detection content, coordinate response efforts, and collaborate with IT, engineering, and business teams to strengthen security posture. Strong MITRE ATT&CK knowledge and SIEM/EDR experience required.