Cybersecurity Engineer

1. General Summary: The Cybersecurity Engineer is responsible for supporting and enhancing Toyota Boshoku America's (TBA) cybersecurity program across its North and South American operations, including the United States, Canada, Mexico, Brazil, and Argentina. This role works closely with Corporate IT, Plant IT, business stakeholders, and third-party service providers to help protect TBA's information systems, manufacturing environments, cloud services, networks, endpoints, and data assets from evolving cybersecurity threats.

The Cybersecurity Engineer will assist in the implementation, administration, monitoring, and continuous improvement of security technologies, controls, and processes that strengthen TBA's overall security posture. Key responsibilities include supporting security operations, vulnerability management, incident response, identity and access management, endpoint security, data protection initiatives, and security monitoring activities. The role will also participate in cybersecurity projects and work collaboratively with internal teams to identify, assess, and remediate security risks.

The ideal candidate possesses a solid foundation in cybersecurity principles, strong analytical and troubleshooting skills, and hands-on experience with security technologies and operational processes. This individual should be comfortable investigating security events, supporting remediation efforts, documenting technical procedures, and collaborating with both technical and non-technical stakeholders in a fast-paced manufacturing environment.

This position offers an opportunity for a motivated cybersecurity professional to further develop technical expertise while contributing to the protection and resilience of TBA's global business operations.

Operational Justification: This job function is operationally necessary to protect Toyota Boshoku America's information systems, manufacturing operations, cloud platforms, networks, endpoints, and data assets across North and South America from increasingly complex cybersecurity threats. As TBA continues to rely on interconnected IT, cloud, and operational technology environments to support business operations, production continuity, supplier communications, and confidential business processes, dedicated cybersecurity engineering support is required to maintain effective security controls, monitor risks, respond to incidents, and reduce the likelihood of operational disruption.

The Cybersecurity Engineer provides hands-on technical capacity needed to implement and sustain cybersecurity tools, investigate security alerts, support vulnerability remediation, assist with incident response, and strengthen identity, endpoint, data protection, cloud, and manufacturing security controls. Without this function, TBA would have reduced ability to detect and respond to malware, phishing, ransomware, unauthorized access attempts, data loss risks, system vulnerabilities, and security gaps affecting both corporate and plant environments.

This role also supports operational resilience by helping balance cybersecurity requirements with manufacturing uptime, safety, and business continuity. The position enables timely execution of security initiatives, consistent documentation of technical controls, coordination with Corporate IT, Plant IT, vendors, and managed security providers, and alignment with recognized cybersecurity frameworks and compliance expectations. Establishing and maintaining this function is therefore critical to reducing enterprise risk, protecting confidential and regulated information, supporting audit readiness, and ensuring TBA can continue operating securely in a rapidly evolving threat environment.

1. Essential Duties & Responsibilities

Cybersecurity Engineering & Operations

• Implement, administer, and maintain cybersecurity controls across cloud, hybrid, on-premises, and manufacturing environments.
• Support the deployment and configuration of security technologies related to identity, endpoint, network, cloud, and data protection.
• Assist with maintaining security baselines, standards, and technical documentation.
• Participate in security reviews of new technologies, applications, and infrastructure deployments to help identify and mitigate security risks.
• Assist with vulnerability management activities, including reviewing scan results, validating remediation efforts, and tracking corrective actions.
• Support cybersecurity projects and initiatives designed to improve TBA's overall security posture.

Security Operations & Incident Response

• Monitor, investigate, and respond to cybersecurity alerts, incidents, and suspicious activity.
• Assist with the investigation and remediation of malware, phishing, unauthorized access attempts, ransomware, and other cybersecurity threats.
• Analyze security logs, endpoint telemetry, network activity, and threat intelligence to identify potential security risks and indicators of compromise.
• Work with internal teams, third-party vendors, and security service providers to support incident response and remediation efforts.
• Assist in maintaining and testing incident response procedures, playbooks, and recovery processes.
• Support security monitoring platforms, alert tuning activities, and continuous improvement of detection capabilities.
• Participate in after-hours support and escalation activities during significant cybersecurity incidents when required.

Identity, Data Protection & Cloud Security

• Administer and support identity security technologies including Microsoft Entra ID, Multi-Factor Authentication (MFA), Conditional Access, access reviews, and Privileged Identity Management (PIM).
• Support data protection initiatives including:
  • Data Classification
  • Sensitivity Labeling
  • Data Loss Prevention (DLP)
  • Insider Risk Management
  • Information Protection Controls
• Assist with securing Microsoft Azure, Microsoft 365, and other cloud-based services utilized by the organization.
• Support implementation and monitoring of security controls for approved AI technologies and emerging business applications.

OT / Manufacturing Security

• Collaborate with Plant IT teams to support cybersecurity controls within manufacturing and operational technology (OT) environments.
• Assist with implementing and maintaining network segmentation, secure remote access, and monitoring controls for manufacturing systems.
• Participate in assessments of cybersecurity risks associated with plant operations, industrial systems, and connected manufacturing technologies.
• Support cybersecurity initiatives that balance security requirements with manufacturing uptime, safety, and operational reliability.
• Assist with implementing cybersecurity controls aligned with industry frameworks and organizational standards.

Governance, Risk & Compliance

• Support cybersecurity policies, standards, procedures, and compliance initiatives.
• Maintain accurate cybersecurity documentation including:
  • Security Configurations
  • System Documentation
  • Network Diagrams
  • Incident Records
  • Operational Procedures
  • Security Baselines
• Track vulnerability remediation activities and assist with risk reduction efforts.
• Support software security reviews, vendor assessments, and third-party risk management activities.
• Assist with internal audits, compliance reviews, and cybersecurity assessments.

Collaboration & Professional Development

• Work collaboratively with infrastructure, networking, application, operations, and manufacturing teams to support cybersecurity objectives.
• Communicate cybersecurity risks, issues, and recommendations effectively to technical and non-technical stakeholders.
• Maintain awareness of emerging cybersecurity threats, vulnerabilities, and industry best practices.
• Participate in ongoing training and professional development to enhance cybersecurity knowledge and technical skills.
• Support continuous improvement efforts that strengthen TBA's cybersecurity capabilities and operational resilience.

III. Minimum Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related technical field, or an equivalent combination of education and relevant experience.
• Minimum of 4-6 years of experience in cybersecurity, information security, systems administration, infrastructure support, or security engineering roles.
• Experience supporting enterprise IT environments, preferably within manufacturing, automotive, or other industrial organizations.
• Experience working with one or more cybersecurity technologies in the following areas:
  • Microsoft Defender
  • Microsoft Entra ID (Azure AD)
  • Microsoft Intune
  • Microsoft Sentinel or similar SIEM platform
  • Endpoint Detection and Response (EDR/XDR) solutions
  • Vulnerability Management tools
• Working knowledge of:
  • Networking fundamentals
  • TCP/IP
  • DNS
  • Firewalls
  • VPN technologies
  • Active Directory
  • Identity and Access Management (IAM)
  • Endpoint Security
  • Cloud Security Concepts
• Experience supporting security monitoring, vulnerability management, incident response, or security operations activities.
• Ability to review and analyze security alerts, logs, and system events to assist with investigations and remediation efforts.
• Experience supporting Microsoft 365, Azure, or hybrid cloud environments preferred.
• Familiarity with cybersecurity frameworks and best practices such as:
  • NIST Cybersecurity Framework (CSF)
  • CIS Controls
  • ISO 27001
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to manage multiple tasks and priorities while working independently and collaboratively within a team environment.
• Strong verbal and written communication skills with the ability to effectively interact with technical and non-technical stakeholders.

1. Preferred Qualifications

• Experience supporting manufacturing, automotive, or industrial environments.
• Exposure to Operational Technology (OT), manufacturing systems, or industrial control system (ICS) environments.
• Experience with one or more of the following technologies:
  • Microsoft Defender
  • Microsoft Intune
  • Microsoft Sentinel
  • Microsoft Entra ID
  • Varonis
  • SolarWinds
  • Cisco security technologies
  • SCCM / Microsoft Configuration Manager
  • Commvault
• Familiarity with cybersecurity concepts such as:
  • Threat Intelligence
  • Security Monitoring
  • Vulnerability Management
  • Incident Response
  • Security Automation
  • Data Protection Technologies
• Experience participating in cybersecurity assessments, audits, or compliance activities.
• Experience supporting cloud security initiatives within Microsoft Azure or Microsoft 365 environments.
• Experience working with third-party vendors, managed security service providers, or cybersecurity consulting partners.
• Understanding of cybersecurity frameworks such as NIST CSF, CIS Controls, or ISO 27001.
• Relevant industry certifications are preferred, including:
  • CompTIA Security+
  • CompTIA CySA+
  • Microsoft SC-200
  • Microsoft SC-300
  • Microsoft AZ-500
  • Microsoft Security, Identity, or Compliance Certifications
  • CISSP (preferred but not required)
• Strong written and verbal communication skills.
• Bilingual or multilingual communication skills are a plus.

1. Skills and Competencies

• Strong analytical and problem-solving skills with the ability to identify and resolve technical security issues.
• Ability to investigate security alerts, system events, and operational issues and assist with determining appropriate remediation actions.
• Strong troubleshooting skills across security, infrastructure, endpoint, network, and cloud technologies.
• Ability to prioritize tasks and manage multiple responsibilities in a fast-paced environment.
• Effective verbal and written communication skills with technical and non-technical stakeholders.
• Ability to work both independently and collaboratively within cross-functional teams.
• Strong attention to detail and commitment to maintaining accurate documentation and operational procedures.
• Understanding of cybersecurity principles, risk management concepts, and security best practices.
• Ability to adapt to changing technologies, business requirements, and evolving cybersecurity threats.
• Strong organizational and time management skills.
• Commitment to continuous learning and professional development within the cybersecurity field.
• Basic knowledge of computer programming or coding concepts, including the ability to understand scripts, automation logic, or code used to support cybersecurity analysis and operations.
• High degree of integrity, professionalism, accountability, and customer service orientation.

1. Work Environment/Conditions :
   Office: Open Office Environment, moderate noise level.
   Plant: N/A

Travel: Must be willing to travel up to 10% of the time between the U.S., Canada, Mexico, and South America

Physical Demands: While performing the duties of this job, the team member is required to talk, see, and hear. The team member must be capable of walking, sitting, and standing for extended periods of time. May be occasionally required to lift up to 30 pounds. Ability to sit and work on a computer for extensive periods of time is required. The ability to travel by automobile and airplane are both required.

Disclaimer: This job description is intended to identify the general nature and level of work performed by team members within this classification, as well as certain essential job functions. It is not intended, and should not be interpreted, as a comprehensive inventory of all duties, responsibilities, and qualifications required of team members assigned to this job. To qualify for this job, however, a team member must be able to perform its essential functions with or without reasonable accommodation. Under no circumstances may this job description be construed as altering the at-will nature of the employment relationship between TBA and any team member.

EOE

#LI-Remote