Cyber Defense Analyst

Ford Motor • Dearborn, MI

17h • $85,400 - $192,900 • Hybrid

About The Position

This hybrid position is for a Cyber Defense Center Detection Analyst specializing in initial threat triage. The analyst swiftly assesses and prioritizes security incidents to determine severity and potential impact, identifies and investigates threats, initiates timely response actions, and escalates incidents to appropriate teams for further investigation or remediation. The position is based in Southeast Michigan and requires onsite work four or more days per week. The analyst must be willing to work at least one weekend per calendar quarter and support a Shift Lead rotation at least once per quarter. During weeks when serving as Shift Lead, the schedule is 11 a.m.–8 p.m. during Eastern Daylight Savings Time and 10 a.m.–7 p.m. during Eastern Standard Time.

The role uses security analysis tools and procedures to triage incidents, collaborate on investigation and containment, answer cybersecurity queries, and document findings for technical and non-technical audiences. It also involves recognizing attacker tactics, techniques, procedures, and indicators of compromise; staying current on emerging threats; and using AI-driven detection and analysis tools to improve triage accuracy and identify emerging attack patterns.

Ford offers a salary range of $85,400–$192,900, with the salary grade and final base salary determined by candidate skills and experience, job scope, responsibility, and market value. Visa sponsorship is not available. Candidates must be legally authorized to work in the United States, with employment eligibility verified at hire.

Requirements

• Bachelor’s degree in a computer-related field.
• At least 2 years of experience with SIEM tools and/or reviewing system log files, data correlation, and analysis, such as firewall, network flow, system logs, or IDS.
• At least 2 years of customer service experience, including resolving escalations, incident handling, and response.
• In-depth knowledge of servers, clients, computer peripherals, network and/or storage technologies, and operating systems including Windows, Linux, and Mac.
• Experience in a fast-paced, high-stress support environment, with a sense of urgency and attention to detail.
• Ability to work well with peers and end users.
• Strong interest in cybersecurity and eagerness and willingness to learn.
• Strong deductive reasoning, critical and analytical thinking, problem-solving, and prioritization skills.
• Disciplined approach to completing work and adhering to procedures.
• Strong oral and written communication skills, including the ability and willingness to explain technical matters in non-technical terms.
• High level of independent initiative, drive for results, and commitment to integrity.
• Ability to work concurrently on multiple assignments or projects and complete them on schedule with high quality.
• Willingness to work at least one weekend per calendar quarter and support the Shift Lead rotation at least once per calendar quarter.
• Ability to work onsite four or more days per week in Southeast Michigan.

Nice To Haves

• At least 2 years of cybersecurity experience.
• At least 2 years of cloud experience with Google Cloud Platform (GCP) or Microsoft Azure.
• Experience applying artificial intelligence (AI) and machine learning (ML) to improve processes, decision-making, or analysis in current job responsibilities.
• Familiarity with Ford computing infrastructure and the application development life cycle (SDM).
• Scripting abilities in Python, PowerShell, Bash/Shell, or SQL.
• GIAC, CEH, CISSP, or other security credentials.

Responsibilities

• Perform initial triage of security incidents, including phishing, malicious software, hostile probes, information theft, and misuse of computing facilities, to determine whether a threat applies to Ford.
• Analyze incidents daily using tools such as SIEM, EDR, IDS/IPS, cloud platforms, and sandbox analysis.
• Collaborate with internal and customer teams to investigate and contain incidents.
• Respond to cybersecurity queries from Ford personnel.
• Follow playbooks and procedures to resolve security incidents consistently and repeatably.
• Document investigation details for technical and non-technical audiences.
• Recognize attacker tools, techniques, and procedures (TTPs) and indicators of compromise (IOCs) relevant to current and future investigations.
• Support the Shift Lead rotation at least once per calendar quarter.
• Keep up to date with emerging cybersecurity threats to help prevent attacks and improve Ford’s cybersecurity posture.
• Use AI-driven threat detection and analysis tools to enhance triage accuracy and accelerate identification of emerging attack patterns.

Benefits

• Immediate medical, dental, vision, and prescription drug coverage.
• Paid parental leave and new-parent ramp-up programs.
• Subsidized backup childcare.
• Adoption and surrogacy expense reimbursement and fertility treatments.
• Vehicle discount program for employees and family members and management leases.
• Tuition assistance.
• Employee resource groups.
• Paid time off for individual and team community service.
• Vacation time, sick/personal time, and paid holidays, including between Christmas Eve and New Year’s Day.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level