Sr. Threat Detection Engineer (Remote)

ABOUT TTS-US

Founded in 2011, Toyota Tsusho Systems US, Inc. (TTS-US) is a global technology company that develops and provides cybersecurity and technology services, and builds solutions focused on defending critical networks. Based in Plano, Texas TTS-US, a Toyota group company, has rapidly transformed itself into a technology and mobility establishment and a leading provider of IT security, including network security, endpoint security, cloud security, cloud workload, mobile security, data security, and security management in addition to threat intelligence, and cyberattack response services.

CYBER FUSION CENTER – THREAT DETECTION ENGINEER (100% remote)

SUMMARY:

The Threat Detection Engineer role is focused on creating detection logic tailored to the enterprise threat landscape using industry-specific intelligence and developed use cases. In this role, the candidate is expected to work closely with Security Engineering in onboarding new data sources and with Cyber Threat Intelligence (CTI) personnel to develop relevant threat hunting and alerting use cases across various networks while maintaining the general threat detection processes and platform.

Requirements

KEY RESPONSIBILITIES:

• Conduct threat detection, incident handling and hunting activities by leveraging security best practices and current detection/response platforms.
• Classify and prioritize threats through use of cyber threat intelligence, intrusion detection systems, firewalls and other boundary protection devices, and any security incident management products deployed.
• Develop use cases and create threat detection logic, rules, and alerting in SIEM for response by the Security Operations team.
• Work with leadership and stakeholders to recommend/implement processes, procedures, and technologies to improve the detection efforts.
• Operationalize Indicator of Compromise from intelligence feeds by developing, testing, and creating new alerting in the SIEM.
• Support the 24/7 Security Operations and Incident Response teams.

MINIMUM QUALIFICATION

• Minimum of 3-5 years of experience in one or more of the following areas: offensive/defensive hunt techniques, malware analysis and Incident Response.
• Experience with content development and alert tuning.
• Expert knowledge of network monitoring and network exploitation techniques
• Ability to demonstrate analytical expertise, close attention to details, excellent critical thinking and learn and adapt quickly.
• Ability to learn and operate in a dynamic environment.
• Strong written communication skills.
• Experience working with cyber security tools and software such as Splunk, Symantec End Point, TrendMicro Antivirus, McAfee Web Gateway, Checkpoint Firewalls, Bluecoat, Sourcefire, Active Directory, or relevant cyber security assets.

PREFFERED QUALIFICATION

• BA/BS or MA/MS in Engineering, Computer Science, Information Security, or Information Systems.
• Certifications such as GCFA, GREM or OSCP/OSCE
• Experience with scripting or programming languages such as Python, Bash or PowerShell.
• Experience with IOC related tools (e.g., YARA, OpenIOC)
• Experience with orchestration and automation tasks related to threat hunting and alert development.

Benefits

 BENEFITS AND PERKS

Medical health insurance (including dental and vision)

Competitive paid time off and company paid holidays

Comp time for holidays worked

401k matching program 

Merit increases and bonus structure

Professional development and education reimbursement

…and more! 

TTS-US offers a variety of benefits and perks to employees. Benefits and perks subject to change. 

Toyota Tsusho Systems US, Inc. (TTS-US) is committed to diversity in its workforce and is proud to be an equal opportunity employer. TTS-US considers qualified applicants without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, marital status, pregnancy, sex, gender expression or identity, sexual orientation, citizenship, or any other legally protected class.