Security Operations Center (SOC) Analyst - L1

Toyota North America•Plano, TX

1d•Onsite

About The Position

Toyota Financial Services is seeking a Security Operations Center (SOC) Analyst to join their team. This role involves monitoring, triaging, and investigating security alerts across various platforms including SIEM, EDR, email, cloud, and network security. The SOC Analyst will support incident detection and response, threat analysis, and ongoing SOC process improvements, while ensuring compliance with internal procedures and service level expectations. Toyota Financial Services is part of the Toyota family, a global leader in mobility and innovation. Applicants must have the right to work in the United States without requiring sponsorship.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field; or equivalent work experience.
0-2 years of cybersecurity, information security, IT operations, help desk, network administration, or related experience.
Basic understanding of Security Operations Center functions and processes.
Basic understanding of Network fundamentals (TCP/IP, DNS, DHCP, HTTP/S).
Basic understanding of Windows and Linux operating systems.
Basic understanding of Cybersecurity threats, attack techniques, and common vulnerabilities.
Basic understanding of Security monitoring and logging concepts.
Basic understanding of Identity and access management principles.
Basic understanding of Endpoint security technologies.
Basic understanding of Cloud security fundamentals (AWS and Microsoft 365 preferred).
Strong analytical and problem-solving abilities.
Ability to identify patterns from large datasets and security alerts.
Excellent written and verbal communication skills.
Strong attention to detail.
Ability to work effectively in a team environment.
Ability to manage multiple tasks and priorities simultaneously.
Customer-focused mindset.
Willingness to learn new technologies and security practices.

Nice To Haves

Experience working with security monitoring tools is preferred.
Internship experience in cybersecurity or IT security is a plus.
Experience with CrowdStrike Falcon.
Experience with Microsoft Defender XDR.
Experience with Microsoft Sentinel or similar SIEM platforms.
Experience with Email security solutions.
Experience with Vulnerability management platforms.
Experience with Threat intelligence platforms.
CompTIA Security+ certification.
CompTIA CySA+ certification.
ISC2 Certified in Cybersecurity (CC) certification.
GIAC GFACT certification.
Microsoft Security Certifications.
AWS Cloud Practitioner certification.

Responsibilities

Monitor security events and alerts generated from SIEM, EDR, email security, cloud security, and network security platforms.
Perform initial triage of security alerts to determine legitimacy, severity, and potential business impact.
Investigate suspicious activities and indicators of compromise (IOCs).
Document investigative findings and actions taken in accordance with established procedures.
Escalate potential security incidents to senior analysts or incident response teams as required.
Respond to incidents after hours or as needed by on-call rotation.
Assist in the identification, containment, and remediation of cybersecurity incidents.
Participate in incident response activities under the guidance of senior analysts.
Gather and preserve relevant evidence for investigations.
Support post-incident documentation and lessons learned activities.
Review threat intelligence reports and security advisories.
Identify suspicious patterns, known threat indicators, and emerging threats that may impact Toyota Financial Services.
Support threat-hunting and proactive monitoring initiatives.
Follow established SOC workflows, playbooks, and standard operating procedures.
Support tuning efforts to reduce false positives and improve alert fidelity.
Contribute to process improvement initiatives that enhance SOC effectiveness.
Maintain accurate case management records and investigation notes.
Assist in supporting cybersecurity controls related to regulatory and compliance requirements.
Help ensure timely handling of security events and incidents according to internal service level agreements (SLAs).
Support audit requests and compliance-related investigations when needed.

Benefits

A work environment built on teamwork, flexibility, and respect
Professional growth and development programs
Tuition reimbursement
Team Member Vehicle Purchase Discount
Toyota Team Member Lease Vehicle Program (if applicable)
Comprehensive health care and wellness plans for your entire family
Toyota 401(k) Savings Plan featuring a company match
Annual retirement contribution from Toyota regardless of whether you contribute (if applicable)
Paid holidays and paid time off
Referral services related to prenatal services, adoption, childcare, schools and more
Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
Relocation assistance (if applicable)