# Cyber Defense Analyst

**Company**: Ford Motor Company
**Location**: Dearborn, MI
**Work arrangement**: hybrid
**Experience**: mid
**Job type**: full-time
**Salary**: $85,400-$192,900
**Category**: Security
**Industry**: Automotive
**Wikidata**: https://www.wikidata.org/wiki/Q44294

**Apply**: https://efds.fa.em5.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1/job/73131?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_08d2f3d9-da3

## Description

We are seeking a Cyber Defense Analyst to join our team in Dearborn, MI.

As a Cyber Defense Center (CDC) Detection Analyst, you will specialize in initial threat triage, swiftly assessing and prioritizing security incidents to determine their severity and potential impact.

Responsibilities:

- Perform initial triage of various security incidents, including phishing, malicious software, hostile probes, information theft, and misuse of computing facilities

- Conduct daily analysis using a range of tools such as SIEM, EDR, IDS/IPS, Cloud, and Sandbox analysis

- Collaborate with internal and customer teams to investigate and contain incidents

- Respond to cyber security queries received from Ford personnel

- Adhere to various playbooks/procedures to provide consistent and repeatable methods to resolve security incidents

- Effectively document investigation details for both technical and non-technical audiences

- Recognize attacker Tools, Techniques, and Procedures (TTPs) and Indicator of Compromises (IOCs) that apply to current and future investigations

- Support Shift Lead rotation at least once per calendar quarter

- Keep up-to-date with emerging cybersecurity threats to proactively prevent potential attacks and improve Ford’s cyber security posture

- Leverage AI-driven threat detection and analysis tools to enhance triage accuracy and accelerate identification of emerging attack patterns

Qualifications:

- Bachelor’s degree in a computer-related field

- 2+ years of experience with SIEM tools and/or reviewing system log files, data correlation, and analysis

- 2+ years of experience in customer service, including the resolution of escalations, incident handling, and response

- In-depth knowledge of servers, clients, various computer peripherals, network and/or storage technologies with various operating systems, including Windows, Linux, and Mac

- Experience in a fast-paced, high-stress, support environment, able to work with a sense of urgency and attention to detail

- Strong interest in cyber security with an eagerness and willingness to learn

- Strong deductive reasoning, critical and analytical thinking, problem-solving, and prioritization skills

- Disciplined approach utilized when completing work and adhering to procedure

- Strong oral and written communications skills – able and willing to communicate technical items in non-technical terms

- Demonstrate a high level of independent initiative, drive for results, and commitment to integrity

- Ability to concurrently work on multiple assignments/projects and complete on schedule with high quality

Benefits:

- Immediate medical, dental, vision, and prescription drug coverage

- Paid parental leave, new parent ramp-up programs, subsidized back-up child care, and more

- Family building benefits, including adoption and surrogacy expense reimbursement, fertility treatments, and more

- Vehicle discount program for employees and family members and management leases

- Tuition assistance

- Established and active employee resource groups

- Paid time off for individual and team community service

- Generous vacation time, sick/personal time, and paid holidays, including between Christmas Eve and New Year’s Day

## Skills

### Required
- SIEM
- EDR
- IDS/IPS
- Cloud
- Sandbox analysis
- Windows
- Linux
- Mac
- Python
- PowerShell
- Bash/Shell
- SQL

### Nice to have
- Cyber Security experience
- Cloud experience in Google Cloud Platform (GCP) or Microsoft Azure
- Artificial Intelligence (AI) and Machine Learning (ML)
- Scripting abilities (Python, PowerShell, Bash/Shell, SQL)
- GIAC, CEH, CISSP or other security credentials

---

Source: [Apply at efds.fa.em5.oraclecloud.com](https://efds.fa.em5.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1/job/73131?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)