SOC Lead: Threat Detection & Incident Response

Toyota Deutschland GmbH; Plano (TX); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Vehicle purchase discount

Relocation assistance

Health care plans

401(k) matching

Job summary

Toyota seeks a SOC Analyst III to join its Security Operations Center in Plano. You will lead advanced threat detection, incident response, and security monitoring, guiding junior analysts and shaping detection content.

The role emphasizes collaboration with IT, cloud, engineering, and business teams to strengthen security posture. Requires 5+ years in cybersecurity and certifications.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, CS, or equivalent.
• 5+ years in cybersecurity operations, IR, or threat hunting.
• Experience investigating threats across endpoints, networks, cloud, and identity.
• Strong knowledge of attacker TTPs and MITRE ATT&CK framework.
• Experience with SIEM, EDR/XDR, threat intel, and log analysis.
• Professional certifications such as CISSP, GCIH, GCFA, GCIA, CySA+.

Responsibilities

• Lead monitoring and analysis of security events from multiple platforms.
• Investigate and validate potential cybersecurity threats and activities.
• Develop detection logic, correlation rules, and alert content.
• Lead investigations across endpoints, networks, cloud, and identity.
• Mentor Tier 1/2 analysts and coordinate incident response.
• Prepare incident summaries and security metrics for leadership.

Skills

Incident Response

Threat Hunting

Detection Engineering

Security Monitoring

Malware Analysis

Security Automation

Risk Assessment

Technical Leadership

Process Improvement

Cross-Functional Collaboration

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience

Tools

SIEM

EDR/XDR

Threat Intelligence

Log Analysis

MITRE ATT&CK

Job description

Toyota seeks a SOC Analyst III to join its Security Operations Center in Plano. You will lead advanced threat detection, incident response, and security monitoring, guiding junior analysts and shaping detection content.

The role emphasizes collaboration with IT, cloud, engineering, and business teams to strengthen security posture. Requires 5+ years in cybersecurity and certifications.