Global Data Security Engineer — Cyber Defense & SIEM

About TTS-US: Founded in 2011, Toyota Tsusho Systems US, Inc. (TTS-US) is a Toyota group company, that develops IT solutions wherever global businesses operate. Transforming into a technology and mobility company, TTS-US with it's 8 TTS affiliates worldwide is establishing a secure and resilient Toyota global value chain. The creative capacity to forge such limitless business opportunities is one of the strengths of Toyota Tsusho Systems. Summary We are hiring for a Cyber Data Security Specialist to ensure data security software is installed, configured,maintainedand supported across a global manufacturing enterprise within a heterogeneous environment -comprisedof both on-premises and cloud-based server and storage platforms. Roles andResponsibilities Install,maintain,and support anti-malware on all network storage devices – ensuring complete coverage inenvironment.Monitor/remediatemalware alerts.Ensure alerts/logsare definedandare successfully sentto SIEM. Checkdailyscheduledjobs and services for errors/issues.Open support caseswithvendors, asneeded.See remediation of issues to end. Review event collection on allmonitoreddevicesto ensurecomplete coverage.Correct any issues to prevent event loss. Monitor CVEs relatedto data securitysoftware andrelated toWindows/Linux OSes.Follow softwarevendor’sreleases.Install updates and patchesin a timely mannerto ensure vulnerability gaps are closed.Implement other countermeasures where updates are not yet released for vulnerabilities. Run projects toidentifyand remediate data that has excessive access permissions. Collaborate with internal teams(such as server, storage, collaboration,active directory,business units, etc.)toaccomplishprojectobjectivesand provide support/expertiseon storage security. Provide support toCollaborationteam to place data classification labels on data. Providerequestedreports to users.Examples include, but not limited to: Show allactivityforuserinprovidedtimeframe. Determinehow files on a share\folder disappeared and who did it. Provide a report of stale data. Show where sensitive files exist with open permissions. Display where files existcontainingSSNs or Credit Card numbers. Collaborate with andassistinternal Cyber teams, such as Incident Detection, Incident Response, Investigation,and Data Loss Prevention on data security needs. Usedata security software to define alerts ofanomalousactivityand ensure alertsare sentto SIEM. Perform health checks on servers,monitorresourceusage,andproactivelyrequestadditionalresources to ensureoptimalperformance. Work withIncidentDetection,IncidentResponse, Investigation, and Data Loss Prevention teams–providingneeded data out ofdata security tools. Manage implementationofdata securityhardware/software at new sites from start to end, including submission offirewallrule modification request. Manage and support host-based intrusion detection systems. Bachelor's Degree or Equivalent experience 2+ years Experience withinstalling,configuring,and usingcybersecurity software for securing data.Knowledge ofNetApp,Varonis and Trend Micro Server Protect is a bonus. Exceptional understandingof CIFS and NTFS, as well as competent in underlining network protocols these rely upon. Experience with and be highly competent in NTFS permissions, ownership,share/folderACLs,inheritance, etc. Administrative knowledge of both Windows Server and Linux OSes,as well asscripting on those platforms. Excellent troubleshooting and diagnostic skills. Experienceleadingchange controls in large global manufacturingenterprise. Collaborating with Cybersecurity to investigate alerts, provide alert details and reports.Requiresclear communication on a stable phone line. Understanding ofsoftware’srequired networkports and protocols.Responsible forsubmittingfirewallrequests to open necessary ports for new modules or Varonis servers. Experience using a SIEM for querying data.KQL query experience with Sentinelpreferred; but notrequired, providing one has theexperiencebuilding queries using other languages, such as SQL. Experience leading the evaluations and proof-of-concepts for new products.Creating unbiased analysis using defined evaluation criteria and providing easy to understand matrix of data supporting recommendations. #J-18808-Ljbffr Toyota Tsusho Systems