Cyber Threat Emulation Operator, Lead

The Toyota Financial ServicesInformation Security Departmentis looking for a passionate and highly motivatedCyber Threat EmulationLead.

Reporting to theNational Manager of Threat Emulation &Investigations this role will collaborate with other Red Team operators to simulate threat actor techniques.The primary focus is to evaluate and enhance cyber defenses through Red Team operations penetration testing and technical control assessments.Additionally this role supports global shared security services and collaborates with TFS Group companiesas needed.

This roleisan in-officeposition based at ourPlano TX headquarters.Candidates are expected tolive within a commutable distance toPlanoand work on-site Monday through Thursday with hybridwork optionsavailableon Fridays.

Whatyoullbe doing

• Design and execute red team operations to test the quality of our cyber controls using threat actor techniques

• Create detailed reports capturing the results of operations and/or penetration tests withappropriate evidenceand mitigation strategies

• Partner with key stakeholders including technology owners and other security teams to share results provide insights and improve the readiness of detection and response capabilities

• Effectively evaluate the risk of identified findings for remediation prioritization

• Leverage your technical skillset toprovide assistanceand guidance to security events as needed

• Stay current on global cyber trends/attacks for application to the Toyota environment

• Serve as a role model for continuous learning cooperation and knowledge sharing with teammates

• Building a trusting and safe environment where problems can be raised without fear of blame retribution or being judged with an emphasis on problem-solving

What you bring

• A curious mindsetand desire to learn

• At least seven (7) or more years ofexperience inone or more of the followingdomains:

• Red Team operations(KaliCobalt Strike OutflankBrute RatelSliver Nighthawk)

• Software development

• OffSecinfrastructure management

• Penetration testing(network/web/mobile:NessusQualysBurpSuite)

• Reverse engineering

• Social Engineering

• Cloud AI

• Suitable forexecutive engagement and thecapability to influence and encourageprioritization of security initiatives

• Bachelors Degree from an accredited institution or equivalent experience

Added bonusif you have

• Relevant security certification (CRTOOSCP OSWE CISSP)

• Familiarity with security frameworks for attack (MITRE ATT&CK Cyber Kill Chain) threat modeling (STRIDE CVSS) andguidance(NIST PCI).

• Understanding ofregulatory issuancessuch asCFPB GLBA andSOX andtheir applicability to technologies applications and privacy laws (GDPR & CCPA) and other legal and compliance privacy and information security requirements.

• Advanced degree with a concentration in an IT related area.

Whatwellbring

During your interview process our team can fill you in on all the details of our industry-leading benefits and career development opportunities. A few highlights include:

• A work environment built on teamwork flexibility and respect

• Professional growth and development programs to help advance your career as well as tuition reimbursement

• Team Member Vehicle Purchase Discount

• Toyota Team Member Lease Vehicle Program (if applicable)

• Comprehensive health care and wellness plans for your entire family

• Flextime and virtual work options (if applicable)

• Toyota 401(k) Savings Plan featuring a company match as well as an annual retirement contribution from Toyota regardless of whether you contribute

• Paid holidays and paid time off

• Referral services related to prenatal services adoption childcare schools and more

• Flexible spending accounts

• Relocationassistance(if applicable)