Cyber Defense Analyst

Ford Motor Company

. Perform initial triage of security incidents, including phishing, malicious software, hostile probes, information theft, and misuse of computing facilities .

Posted 10/28/2026full-timeDearborn • Michigan • United StatesJuniorMid-Level💰 $85,400 - $192,900 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in incident analysis and response, utilizing SIEM tools and cloud technologies to enhance cybersecurity measures. Strong communication skills facilitate collaboration with technical and non-technical stakeholders while maintaining a disciplined approach to problem-solving and adherence to procedures.

Highest-signal resume keywords

SIEM Tools ExperienceIncident HandlingCybersecurity KnowledgeCloud Experience (GCP/Azure)Scripting Abilities (Python/PowerShell)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident AnalysisData CorrelationMalicious Software DetectionPhishing ResponseNetwork Flow AnalysisOperating Systems (Windows/Linux/Mac)AI-Driven Threat DetectionIndicators of Compromise (IOCs)Tools, Techniques, and Procedures (TTPs)Documentation Skills

Soft Skills

Critical ThinkingProblem SolvingAttention to DetailCommunication SkillsTeam Collaboration

Tools & Technologies

SIEMEDRIDS/IPSCloud TechnologiesSandbox Analysis Tools

Certifications & Qualifications

GIACCEHCISSP

Industry Keywords

CybersecurityIncident ResponseCustomer ServiceEmerging ThreatsFord Computing Infrastructure

Tech Stack

Tools & technologies

AzureCloudCyber SecurityGoogle Cloud PlatformLinuxPythonSQL

About the role

Key responsibilities & impact

Perform initial triage of security incidents, including phishing, malicious software, hostile probes, information theft, and misuse of computing facilities
Conduct daily incident analysis using SIEM, EDR, IDS/IPS, cloud, and sandbox analysis tools
Collaborate with internal and customer teams to investigate and contain incidents
Respond to cybersecurity queries from Ford personnel
Follow playbooks and procedures to resolve incidents consistently and repeatably
Document investigation details for technical and non-technical audiences
Recognize attacker Tools, Techniques, and Procedures (TTPs) and Indicators of Compromise (IOCs)
Support the Shift Lead rotation at least once per calendar quarter
Keep up to date with emerging cybersecurity threats to prevent attacks and improve Ford’s cybersecurity posture
Leverage AI-driven threat detection and analysis tools to improve triage accuracy and identify emerging attack patterns

Requirements

What you’ll need

Bachelor’s degree in a computer related field
2+ years of experience with SIEM tools and/or reviewing system log files, data correlation, and analysis (i.e. firewall, network flow, system logs, IDS)
2+ years of experience in customer service including the resolution of escalations, incident handling, and response
In depth knowledge of servers, clients, various computer peripherals, network and/or storage technologies with various operating systems including Windows, Linux, and Mac
Experience in a fast paced, high stress, support environment, able to work with a sense of urgency and attention to detail
Must work well with others including peers and end-users
Strong interest in cyber security with an eagerness and willingness to learn
Strong deductive reasoning, critical and analytical thinking, problem solving, and prioritization skills
Disciplined approach utilized when completing work and adhering to procedure
Strong oral and written communications skills – able and willing to communicate technical items in non-technical terms
Demonstrate high level of independent initiative, drive for results and commitment to integrity
Ability to concurrently work on multiple assignments/projects and complete on schedule with high quality
Must be legally authorized to work in the United States
Preferred: 2+ years of Cyber Security experience
Preferred: 2+ years Cloud experience in Google Cloud Platform (GCP) or Microsoft Azure
Preferred: Experience applying Artificial Intelligence (AI) and Machine Learning (ML) to improve processes, decision-making, or analysis
Preferred: Familiarity with Ford Computing Infrastructure and application development life cycle (SDM)
Preferred: Scripting abilities (Python, PowerShell, Bash/Shell, SQL)
Preferred: GIAC, CEH, CISSP or other security credentials

Benefits

Comp & perks

Immediate medical, dental, vision, and prescription drug coverage
Paid parental leave, new parent ramp-up programs, subsidized back-up child care and more
Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments and more
Vehicle discount program for employees and family members and management leases
Tuition assistance
Established and active employee resource groups
Paid time off for individual and team community service
Generous vacation time, sick/personal time, and paid holidays, including between Christmas Eve and New Year’s Day