Cyber Defense Analyst

We are seeking a Cyber Defense Analyst to join our team in Dearborn, MI.

As a Cyber Defense Center (CDC) Detection Analyst, you will specialize in initial threat triage, swiftly assessing and prioritizing security incidents to determine their severity and potential impact.

Responsibilities:

• Perform initial triage of various security incidents, including phishing, malicious software, hostile probes, information theft, and misuse of computing facilities
• Conduct daily analysis using a range of tools such as SIEM, EDR, IDS/IPS, Cloud, and Sandbox analysis
• Collaborate with internal and customer teams to investigate and contain incidents
• Respond to cyber security queries received from Ford personnel
• Adhere to various playbooks/procedures to provide consistent and repeatable methods to resolve security incidents
• Effectively document investigation details for both technical and non-technical audiences
• Recognize attacker Tools, Techniques, and Procedures (TTPs) and Indicator of Compromises (IOCs) that apply to current and future investigations
• Support Shift Lead rotation at least once per calendar quarter
• Keep up-to-date with emerging cybersecurity threats to proactively prevent potential attacks and improve Ford’s cyber security posture
• Leverage AI-driven threat detection and analysis tools to enhance triage accuracy and accelerate identification of emerging attack patterns

Qualifications:

• Bachelor’s degree in a computer-related field
• 2+ years of experience with SIEM tools and/or reviewing system log files, data correlation, and analysis
• 2+ years of experience in customer service, including the resolution of escalations, incident handling, and response
• In-depth knowledge of servers, clients, various computer peripherals, network and/or storage technologies with various operating systems, including Windows, Linux, and Mac
• Experience in a fast-paced, high-stress, support environment, able to work with a sense of urgency and attention to detail
• Strong interest in cyber security with an eagerness and willingness to learn
• Strong deductive reasoning, critical and analytical thinking, problem-solving, and prioritization skills
• Disciplined approach utilized when completing work and adhering to procedure
• Strong oral and written communications skills – able and willing to communicate technical items in non-technical terms
• Demonstrate a high level of independent initiative, drive for results, and commitment to integrity
• Ability to concurrently work on multiple assignments/projects and complete on schedule with high quality

Benefits:

• Immediate medical, dental, vision, and prescription drug coverage
• Paid parental leave, new parent ramp-up programs, subsidized back-up child care, and more
• Family building benefits, including adoption and surrogacy expense reimbursement, fertility treatments, and more
• Vehicle discount program for employees and family members and management leases
• Tuition assistance
• Established and active employee resource groups
• Paid time off for individual and team community service
• Generous vacation time, sick/personal time, and paid holidays, including between Christmas Eve and New Year’s Day