Cyber Defense Analyst

Ford Motor Company • Dearborn, MI

1d • $85,400 - $192,900 • Hybrid

About The Position

This position is for a Cyber Defense Center (CDC) Detection Analyst specializing in initial threat triage. The analyst swiftly assesses and prioritizes security incidents to determine severity and potential impact, identifies and investigates threats, initiates timely response actions, and escalates incidents to appropriate teams for further investigation or remediation. The role is hybrid and requires onsite work in Southeast Michigan, with onsite attendance four or more days per week. Candidates must be willing to work at least one weekend per calendar quarter. During weeks when serving as Shift Lead, the shift is 11 a.m.–8 p.m. during Eastern Daylight Savings Time and 10 a.m.–7 p.m. during Eastern Standard Time.

The position is salary grade 6–8, with a stated range of $85,400–$192,900. Final salary grade and pay within the applicable range depend on skills, experience, job scope, responsibility, and competitive market value. Visa sponsorship is unavailable. Candidates must be legally authorized to work in the United States, and employment eligibility will be verified at hire.

Requirements

• Bachelor’s degree in a computer-related field.
• At least 2 years of experience with SIEM tools and/or reviewing system log files, data correlation, and analysis, such as firewall, network flow, system logs, or IDS.
• At least 2 years of customer service experience, including resolving escalations, incident handling, and response.
• In-depth knowledge of servers, clients, computer peripherals, network and/or storage technologies, and operating systems including Windows, Linux, and Mac.
• Experience in a fast-paced, high-stress support environment, with a sense of urgency and attention to detail.
• Ability to work well with peers and end users.
• Strong interest in cybersecurity and willingness to learn.
• Strong deductive reasoning, critical and analytical thinking, problem-solving, and prioritization skills.
• Disciplined approach to completing work and following procedures.
• Strong oral and written communication skills, including explaining technical topics in non-technical terms.
• High level of independent initiative, drive for results, and commitment to integrity.
• Ability to work concurrently on multiple assignments or projects and complete them on schedule and with high quality.
• Willingness to work at least one weekend per calendar quarter and support the Shift Lead rotation.

Nice To Haves

• At least 2 years of cybersecurity experience.
• At least 2 years of cloud experience with Google Cloud Platform (GCP) or Microsoft Azure.
• Experience applying artificial intelligence (AI) and machine learning (ML) to improve processes, decision-making, or analysis in current job responsibilities.
• Familiarity with Ford Computing Infrastructure and the application development life cycle (SDM).
• Scripting ability in Python, PowerShell, Bash/Shell, or SQL.
• GIAC, CEH, CISSP, or other security credentials.

Responsibilities

• Perform initial triage of security incidents to determine whether threats affect Ford, including phishing, malicious software, hostile probes, information theft, and misuse of computing facilities.
• Analyze incidents daily using tools such as SIEM, EDR, IDS/IPS, cloud tools, and sandbox analysis.
• Collaborate with internal and customer teams to investigate and contain incidents.
• Respond to cybersecurity queries from Ford personnel.
• Follow playbooks and procedures to resolve security incidents consistently and repeatably.
• Document investigation details effectively for technical and non-technical audiences.
• Recognize attacker tools, techniques, and procedures (TTPs) and indicators of compromise (IOCs) relevant to current and future investigations.
• Support the Shift Lead rotation at least once per calendar quarter.
• Stay up to date with emerging cybersecurity threats to help prevent attacks and improve Ford’s cybersecurity posture.
• Leverage AI-driven threat detection and analysis tools to improve triage accuracy and accelerate identification of emerging attack patterns.

Benefits

• Immediate medical, dental, vision, and prescription drug coverage.
• Paid parental leave, new parent ramp-up programs, and subsidized backup child care.
• Family-building benefits, including adoption and surrogacy expense reimbursement and fertility treatments.
• Vehicle discount program for employees and family members, and management leases.
• Tuition assistance.
• Established and active employee resource groups.
• Paid time off for individual and team community service.
• Vacation time, sick/personal time, and paid holidays, including time between Christmas Eve and New Year’s Day.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level