Threat Detection & Triage Analyst (Hybrid)

Ford Motor; Dearborn (MI); Hybrid; USD 85.000 - 193.000; Vollzeit

Benefits dieser Stelle

Medical, dental, vision coverage

Paid parental leave

Tuition assistance

Vehicle discount program

Paid time off

Zusammenfassung

Ford Motor Company in Michigan is seeking a Cyber Defense Center Detection Analyst focused on initial threat triage and rapid incident assessment. You will determine severity, initiate timely responses, and escalate for remediation, with a hybrid on-site schedule in Southeast Michigan.

You’ll perform triage of incidents (phishing, malware, intrusions), conduct daily analyses using SIEM/EDR/IDS, and collaborate with internal and customer teams to contain threats.

Qualifikationen

• Bachelor’s degree in a computer related field.
• 2+ years of experience with SIEM tools and/or reviewing system log files, data correlation, and analysis (i.e. firewall, network flow, system logs, IDS)
• 2+ years of experience in customer service including the resolution of escalations, incident handling, and response
• In depth knowledge of servers, clients, various computer peripherals, network and/or storage technologies with various operating systems including Windows, Linux, and Mac
• Experience in a fast paced, high stress, support environment, able to work with a sense of urgency and attention to detail
• Must work well with others including peers and end-users
• Strong interest in cyber security with an eagerness and willingness to learn
• Strong deductive reasoning, critical and analytical thinking, problem solving, and prioritization skills
• Disciplined approach utilized when completing work and adhering to procedure
• Strong oral and written communications skills – able and willing to communicate technical items in non-technical terms
• Demonstrate high level of independent initiative, drive for results and commitment to integrity
• Ability to concurrently work on multiple assignments/projects and complete on schedule with high quality

Aufgaben

• Perform initial triage of various security incidents to determine if a threat applies to Ford including phishing, malicious software, hostile probes, information theft, and misuse of computing facilities
• Conduct daily analysis on the aforementioned incidents using a range of tools such as SIEM, EDR, IDS/IPS, Cloud, and Sandbox analysis
• Collaborate with internal and customer teams to investigate and contain incidents
• Respond to cyber security queries received from Ford personnel
• Adhere to various playbooks/procedures to provide consistent and repeatable methods to resolve security incidents
• Effectively document investigation details for both technical and non-technical audiences
• Recognize attacker Tools, Techniques, and Procedures (TTPs) and Indicator of Compromises (IOCs) that apply to current and future investigations
• Support Shift Lead rotation at least once per calendar quarter
• Keeping up-to-date with emerging cybersecurity threats to proactively prevent potential attacks and improve Ford’s cyber security posture
• Leverage AI-driven threat detection and analysis tools to enhance triage accuracy and accelerate identification of emerging attack patterns

Kenntnisse

SIEM tools

Log file analysis

Customer service

Cross-team collaboration

Windows/Linux/Mac

Analytical thinking

Communication skills

Prioritization

Attention to detail

Independent initiative

Ausbildung

Bachelor’s degree in a computer related field

Tools

Python

PowerShell

Bash

SQL

GCP

Azure

Jobbeschreibung

Ford Motor Company in Michigan is seeking a Cyber Defense Center Detection Analyst focused on initial threat triage and rapid incident assessment. You will determine severity, initiate timely responses, and escalate for remediation, with a hybrid on-site schedule in Southeast Michigan.

You’ll perform triage of incidents (phishing, malware, intrusions), conduct daily analyses using SIEM/EDR/IDS, and collaborate with internal and customer teams to contain threats.