Cybersecurity Engineer

1. General Summary: The Cybersecurity Engineer is responsible for supporting and enhancing Toyota Boshoku America's (TBA) cybersecurity program across its North and South American operations, including the United States, Canada, Mexico, Brazil, and Argentina. This role works closely with Corporate IT, Plant IT, business stakeholders, and third-party service providers to help protect TBA's information systems, manufacturing environments, cloud services, networks, endpoints, and data assets from evolving cybersecurity threats.

The Cybersecurity Engineer will assist in the implementation, administration, monitoring, and continuous improvement of security technologies, controls, and processes that strengthen TBA's overall security posture. Key responsibilities include supporting security operations, vulnerability management, incident response, identity and access management, endpoint security, data protection initiatives, and security monitoring activities. The role will also participate in cybersecurity projects and work collaboratively with internal teams to identify, assess, and remediate security risks.

The ideal candidate possesses a solid foundation in cybersecurity principles, strong analytical and troubleshooting skills, and hands-on experience with security technologies and operational processes. This individual should be comfortable investigating security events, supporting remediation efforts, documenting technical procedures, and collaborating with both technical and non-technical stakeholders in a fast-paced manufacturing environment.

This position offers an opportunity for a motivated cybersecurity professional to further develop technical expertise while contributing to the protection and resilience of TBA's global business operations.

• Implement, administer, and maintain cybersecurity controls across cloud, hybrid, on-premises, and manufacturing environments.
• Support the deployment and configuration of security technologies related to identity, endpoint, network, cloud, and data protection.
• Assist with maintaining security baselines, standards, and technical documentation.
• Participate in security reviews of new technologies, applications, and infrastructure deployments to help identify and mitigate security risks.
• Assist with vulnerability management activities, including reviewing scan results, validating remediation efforts, and tracking corrective actions.
• Support cybersecurity projects and initiatives designed to improve TBA's overall security posture.

• Monitor, investigate, and respond to cybersecurity alerts, incidents, and suspicious activity.
• Assist with the investigation and remediation of malware, phishing, unauthorized access attempts, ransomware, and other cybersecurity threats.
• Analyze security logs, endpoint telemetry, network activity, and threat intelligence to identify potential security risks and indicators of compromise.
• Work with internal teams, third-party vendors, and security service providers to support incident response and remediation efforts.
• Assist in maintaining and testing incident response procedures, playbooks, and recovery processes.
• Support security monitoring platforms, alert tuning activities, and continuous improvement of detection capabilities.
• Participate in after-hours support and escalation activities during significant cybersecurity incidents when required.

• Administer and support identity security technologies including Microsoft Entra ID, Multi-Factor Authentication (MFA), Conditional Access, access reviews, and Privileged Identity Management (PIM).
• Support data protection initiatives including:
  • Data Classification
  • Sensitivity Labeling
  • Data Loss Prevention (DLP)
  • Insider Risk Management
  • Information Protection Controls
• Assist with securing Microsoft Azure, Microsoft 365, and other cloud-based services utilized by the organization.
• Support implementation and monitoring of security controls for approved AI technologies and emerging business applications.

• Collaborate with Plant IT teams to support cybersecurity controls within manufacturing and operational technology (OT) environments.
• Assist with implementing and maintaining network segmentation, secure remote access, and monitoring controls for manufacturing systems.
• Participate in assessments of cybersecurity risks associated with plant operations, industrial systems, and connected manufacturing technologies.
• Support cybersecurity initiatives that balance security requirements with manufacturing uptime, safety, and operational reliability.
• Assist with implementing cybersecurity controls aligned with industry frameworks and organizational standards.

• Support cybersecurity policies, standards, procedures, and compliance initiatives.
• Maintain accurate cybersecurity documentation including:
  • Security Configurations
  • System Documentation
  • Network Diagrams
  • Incident Records
  • Operational Procedures
  • Security Baselines
• Track vulnerability remediation activities and assist with risk reduction efforts.
• Support software security reviews, vendor assessments, and third-party risk management activities.
• Assist with internal audits, compliance reviews, and cybersecurity assessments.

• Work collaboratively with infrastructure, networking, application, operations, and manufacturing teams to support cybersecurity objectives.
• Communicate cybersecurity risks, issues, and recommendations effectively to technical and non-technical stakeholders.
• Maintain awareness of emerging cybersecurity threats, vulnerabilities, and industry best practices.
• Participate in ongoing training and professional development to enhance cybersecurity knowledge and technical skills.
• Support continuous improvement efforts that strengthen TBA's cybersecurity capabilities and operational resilience.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related technical field, or an equivalent combination of education and relevant experience.
• Minimum of 4–6 years of experience in cybersecurity, information security, systems administration, infrastructure support, or security engineering roles.
• Experience supporting enterprise IT environments, preferably within manufacturing, automotive, or other industrial organizations.
• Experience working with one or more cybersecurity technologies in the following areas:
  • Microsoft Defender
  • Microsoft Entra ID (Azure AD)
  • Microsoft Intune
  • Microsoft Sentinel or similar SIEM platform
  • Endpoint Detection and Response (EDR/XDR) solutions
  • Vulnerability Management tools
• Working knowledge of:
  • Networking fundamentals
  • TCP/IP
  • DNS
  • Firewalls
  • VPN technologies
  • Active Directory
  • Identity and Access Management (IAM)
  • Endpoint Security
  • Cloud Security Concepts
• Experience supporting security monitoring, vulnerability management, incident response, or security operations activities.
• Ability to review and analyze security alerts, logs, and system events to assist with investigations and remediation efforts.
• Experience supporting Microsoft 365, Azure, or hybrid cloud environments preferred.
• Familiarity with cybersecurity frameworks and best practices such as:
  • NIST Cybersecurity Framework (CSF)
  • CIS Controls
  • ISO 27001
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to manage multiple tasks and priorities while working independently and collaboratively within a team environment.
• Strong verbal and written communication skills with the ability to effectively interact with technical and non-technical stakeholders.

1. Preferred Qualifications

• Experience supporting manufacturing, automotive, or industrial environments.
• Exposure to Operational Technology (OT), manufacturing systems, or industrial control system (ICS) environments.
• Experience with one or more of the following technologies:
  • Microsoft Defender
  • Microsoft Intune
  • Microsoft Sentinel
  • Microsoft Entra ID
  • Varonis
  • SolarWinds
  • Cisco security technologies
  • SCCM / Microsoft Configuration Manager
  • Commvault
• Familiarity with cybersecurity concepts such as:
  • Threat Intelligence
  • Security Monitoring
  • Vulnerability Management
  • Incident Response
  • Security Automation
  • Data Protection Technologies
• Experience participating in cybersecurity assessments, audits, or compliance activities.
• Experience supporting cloud security initiatives within Microsoft Azure or Microsoft 365 environments.
• Experience working with third-party vendors, managed security service providers, or cybersecurity consulting partners.
• Understanding of cybersecurity frameworks such as NIST CSF, CIS Controls, or ISO 27001.
• Relevant industry certifications are preferred, including:
  • CompTIA Security+
  • CompTIA CySA+
  • Microsoft SC-200
  • Microsoft SC-300
  • Microsoft AZ-500
  • Microsoft Security, Identity, or Compliance Certifications
  • CISSP (preferred but not required)
• Strong written and verbal communication skills.
• Bilingual or multilingual communication skills are a plus.

1. Skills and Competencies

• Strong analytical and problem-solving skills with the ability to identify and resolve technical security issues.
• Ability to investigate security alerts, system events, and operational issues and assist with determining appropriate remediation actions.
• Strong troubleshooting skills across security, infrastructure, endpoint, network, and cloud technologies.
• Ability to prioritize tasks and manage multiple responsibilities in a fast-paced environment.
• Effective verbal and written communication skills with technical and non-technical stakeholders.
• Ability to work both independently and collaboratively within cross-functional teams.
• Strong attention to detail and commitment to maintaining accurate documentation and operational procedures.
• Understanding of cybersecurity principles, risk management concepts, and security best practices.
• Ability to adapt to changing technologies, business requirements, and evolving cybersecurity threats.
• Strong organizational and time management skills.
• Commitment to continuous learning and professional development within the cybersecurity field.
• Basic knowledge of computer programming or coding concepts, including the ability to understand scripts, automation logic, or code used to support cybersecurity analysis and operations.
• High degree of integrity, professionalism, accountability, and customer service orientation.

1. Work Environment/Conditions:
   Office:  Open Office Environment, moderate noise level.
                 Plant:  N/A