Description
This position is for a Cyber Defense Center (CDC) Detection Analyst specializing in initial threat triage. The role involves swiftly assessing and prioritizing security incidents to determine their severity and potential impact. You will be responsible for promptly identifying and investigating various threats, initiating timely response actions, and escalating to appropriate teams for further investigation and/or remediation.
The responsibilities of this role include performing initial triage and investigation of various security incidents, conducting daily analysis using a range of tools, investigating alerts across multi-cloud and on-premises environments, collaborating with internal business units and technical teams to investigate and contain incidents, responding to cybersecurity inquiries received from Ford personnel, executing and maintaining security playbooks and standard operating procedures, effectively documenting investigation details, identifying and mapping attacker TTPs and IOCs to the MITRE ATT&CK framework, supporting Shift Lead rotation, monitoring the global threat landscape, and staying up-to-date with emerging cybersecurity trends.
To be successful in this role, you will need to have a Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related technical field, and 3+ years of experience in a Security Operations Center (SOC) or Cyber Defense Center (CDC). You will also need to have hands-on experience with SIEM platforms and EDR/XDR tools, performing data correlation and analysis of system logs, incident handling and triage, and foundational knowledge of Operating Systems, network protocols, and core infrastructure technologies.
Preferred qualifications include 2+ years of experience with Google Cloud Platform (GCP) or Microsoft Azure, experience leveraging or tuning Artificial Intelligence (AI) and Machine Learning (ML) tools, proficiency in scripting languages such as Python, PowerShell, Bash, or SQL, familiarity with Ford's computing infrastructure and the Software Development Methodology (SDM), and preferred industry credentials such as GIAC (GCIH, GCIA), CEH or CIISP.