Cyber Threat Management Senior Associate - 331986
Dearborn Michigan
12 months Contract
Position Description:
This role within the Vehicle and Connected Cybersecurity organization is responsible for hands-on operational monitoring and incident response for connected vehicle and cloud environments. As part of the Product Security Operations Center (PSOC) team, you will triage alerts, support investigations, and help drive timely resolution across vehicle telematics, embedded systems, and cloud-native application stacks. This role contributes directly to Ford s continuous cybersecurity monitoring capability for connected vehicles and the cloud services that support them. Reporting to the Manager of Monitoring Operations, this role focuses on alert triage, incident support, and continuous improvement of monitoring processes. We are seeking candidates with a solid cybersecurity foundation, including API security experience, along with embedded-vehicle exposure or a demonstrated aptitude and eagerness to learn. You will partner with cloud, vehicle, enterprise, incident-response, and global PSOC teams to help ensure effective investigation and resolution of security events affecting connected vehicles and the cloud services that power them.
Skills Required:
Cyber Security, API, Information Security
Skills Preferred:
N/A
Experience Required:
Senior Associate Exp: 3 to 5 years' experience in relevant field- Bachelor s degree in Computer Science, Cybersecurity, or Engineering, or related field. 2+ years in cybersecurity, security operations, or a related technical field. Working understanding of incident response lifecycles, escalation, and incident management practices. Experience with API security and exposure to cloud security operations on one or more major cloud platforms, including logging, monitoring, identity, and response workflows. Embedded vehicle cybersecurity exposure, or a demonstrated aptitude and eagerness to learn. Ability to work effectively in a fast-paced 24x7 operations environment, including shift-based coverage. Clear written and verbal communication for documenting incidents and coordinating with technical team
Experience Preferred:
Exposure to detecting and investigating threats across cloud and vehicle telemetry data, including log correlation and alert tuning. Experience using/refining runbooks, playbooks, and escalation procedures in an operations setting. Relevant certifications such as Security+, GIAC, or foundational cloud security certifications across AWS, Azure, or Google Cloud Platform. Familiarity with embedded or automotive environments and the security considerations of cloud architecture. Ability to turn recurring incidents into process or detection improvement suggestions
Education Required:
Bachelor's Degree
Education Preferred:
Certification Program
Additional Safety Training/Licensing/Personal Protection Requirements: