Security Analyst

Description:

• The Vulnerability Management Team is core function of Toyota Motor North America and is tasked with continually improving the security posture of Toyota Motor North America through the analysis of vulnerability and threat data, responding appropriately to the result of such analysis, providing security-related guidance, developing security policies and communicating security matters throughout the company.
  
• A well-qualified candidate will demonstrate the following key traits:
  
• Expertise and keen interest in emerging information security trends and technologies.
  
• Prior experience on a Vulnerability and Threat Management team
  
• Ability to positively influence the behavior of peers and build relationships with other teams
  
• Capable of analyzing large amounts of disparate data to produce easily understandable content
  
• Vulnerability Scanning and Penetration Testing (network, operating system, and application layers)
  
• Experience with one or more of the following technologies: Vulnerability Management, Advanced Malware Detection.
  
• Patch Management and Vulnerability Remediation

## Qualifications

Requirements:

• 3+ years of experience in performing vulnerability assessments
  
• Experience running & managing automated vulnerability scanning and related tools
  
• Knowledge of standard vulnerability & exploit framework (ex: CVSS, OWASP Top 10)
  
• Experience securing multiple platforms and operating systems
  
• Expertise of industry standard threat and vulnerability controls
  
• Solid understanding of network design and architecture
  
• An understanding of security frameworks: ISO 2700X, NIST, CIS
  
• Associates or Technical Degree in a related field and/or a minimum of 3 years of equivalent experience
  
• Information Security and control certifications preferred but not mandatory (CISSP, SSCP, GIAC, CEH, SECURITY+, etc)
  
• Military education or experience may be considered in lieu of civilian requirements listed

## Additional Information

All your information will be kept confidential according to EEO guidelines.