Security Operations Center (SOC) Analyst L1

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the worlds most admired brands Toyota is growing and leading the future of mobility through innovative high-quality solutions designed to enhance lives and delight those we serve. Were looking for talented team members who want to Dream. Do. Grow. with us.

An important part of the Toyota family is Toyota Financial Services (TFS) the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity it is an essential part of this world-changing company- delivering on Toyotas vision to move people beyond whats possible. At TFS you will help create best-in-class customer experience in an innovative collaborative environment.

Who were looking for

Toyota Financial Services is seeking a Security Operations Center (SOC) Analyst to join our team. We are seeking a SOC Analyst to help monitor triage and investigate security alerts across SIEM EDR email cloud and network security platforms. This role supports incident detection and response threat analysis and ongoing SOC process improvements while helping ensure compliance with internal procedures and service level expectations.

What youll be doing

Security Monitoring & Alert Triage

• Monitor security events and alerts generated from SIEM EDR email security cloud security and network security platforms.

• Perform initial triage of security alerts to determine legitimacy severity and potential business impact.

• Investigate suspicious activities and indicators of compromise (IOCs).

• Document investigative findings and actions taken in accordance with established procedures.

• Escalate potential security incidents to senior analysts or incident response teams as required.

• Respond to incidents after hours or as needed by on-call rotation

Incident Detection & Response Support

• Assist in the identification containment and remediation of cybersecurity incidents.

• Participate in incident response activities under the guidance of senior analysts.

• Gather and preserve relevant evidence for investigations.

• Support post-incident documentation and lessons learned activities.

Threat Intelligence & Analysis

• Review threat intelligence reports and security advisories.

• Identify suspicious patterns known threat indicators and emerging threats that may impact Toyota Financial Services.

• Support threat-hunting and proactive monitoring initiatives.

Security Operations & Process Improvement

• Follow established SOC workflows playbooks and standard operating procedures.

• Support tuning efforts to reduce false positives and improve alert fidelity.

• Contribute to process improvement initiatives that enhance SOC effectiveness.

• Maintain accurate case management records and investigation notes.

Compliance & Risk Support

• Assist in supporting cybersecurity controls related to regulatory and compliance requirements.

• Help ensure timely handling of security events and incidents according to internal service level agreements (SLAs).

• Support audit requests and compliance-related investigations when needed.

What you bring

• Bachelors degree in Cybersecurity Information Technology Computer Science or a related field; or equivalent work experience.

• 0-2 years of cybersecurity information security IT operations help desk network administration or related experience.

• Experience working with security monitoring tools is preferred.

• Internship experience in cybersecurity or IT security is a plus.

Technical Knowledge

Basic understanding of:

• Security Operations Center functions and processes

• Network fundamentals (TCP/IP DNS DHCP HTTP/S)

• Windows and Linux operating systems

• Cybersecurity threats attack techniques and common vulnerabilities

• Security monitoring and logging concepts

• Identity and access management principles

• Endpoint security technologies

• Cloud security fundamentals (AWS and Microsoft 365 preferred)

Security Tools

• CrowdStrike Falcon

• Microsoft Defender XDR

• Microsoft Sentinel or similar SIEM platforms

• Email security solutions

• Vulnerability management platforms

• Threat intelligence platforms

Desired Skills

• Strong analytical and problem-solving abilities

• Ability to identify patterns from large datasets and security alerts

• Excellent written and verbal communication skills

• Strong attention to detail

• Ability to work effectively in a team environment

• Ability to manage multiple tasks and priorities simultaneously

• Customer-focused mindset

• Willingness to learn new technologies and security practices

Added bonus if you have

One or more of the following certifications are preferred:

• CompTIA Security

• CompTIA CySA

• ISC2 Certified in Cybersecurity (CC)

• GIAC GFACT

• Microsoft Security Certifications

• AWS Cloud Practitioner

Key Performance Indicators (KPIs)

• Alert triage and response time

• Incident escalation accuracy

• Case documentation quality

• Adherence to SOC procedures and SLAs

• Reduction of false-positive investigations

• Completion of assigned training and development goals

What well bring

During your interview process our team can fill you in on all the details of our industry-leading benefits and career development opportunities. A few highlights include:

• A work environment built on teamwork flexibility and respect

• Professional growth and development programs to help advance your career as well as tuition reimbursement

• Team Member Vehicle Purchase Discount

• Toyota Team Member Lease Vehicle Program (if applicable)

• Comprehensive health care and wellness plans for your entire family

• Toyota 401(k) Savings Plan featuring a company match as well as an annual retirement contribution from Toyota regardless of whether you contribute (if applicable)

• Paid holidays and paid time off

• Referral services related to prenatal services adoption childcare schools and more

• Tax Advantaged Accounts (Health Savings Account Health Care FSA Dependent Care FSA) Relocation assistance (if applicable)