Cyber Automation Analyst - Security Operations Center
Ford MotorBase Salary
$100k - $193k/yr
Responsibilities
- Create, enhance, tune, test, and operationalize curated and custom security detections across Google SecOps SIEM/SOAR, EDR, cloud, identity, and application telemetry.
- Build Python-based SOAR orchestration and integrations that enrich cases, normalize security data, execute response actions, and connect security platforms.
- Engineer Agentic SOC capabilities including agent skills, agent-to-tool orchestration, RAG workflows, MCP tool integrations, prompt and response guardrails, and human-in-the-loop approvals.
- Apply secure software development, code review, infrastructure-as-code, secrets management, least-privilege access, audit logging, and production-readiness practices.
- Translate attacker behavior, cloud telemetry, endpoint signals, identity events, and SOC case history into detection logic and automated response workflows.
Requirements
- Bachelor’s degree in computer science, cybersecurity, engineering, information systems, or a related technical field, or equivalent practical experience combined with education.
- At least five years of experience in production detection engineering, including creating, tuning, testing, and deploying SIEM or security analytics detections.
- Hands-on experience building and operating GCP-hosted CI/CD pipelines using Tekton tasks, pipelines, triggers, workload identity or service accounts, secrets handling, and deployment promotion workflows.
- Proficiency developing AI-assisted or Agentic SOC capabilities using generative AI, LLMs, RAG, agent skills, tool orchestration, MCP-style integrations, evaluation patterns, and security guardrails.
- Strong Python skills covering API integrations, structured data handling, automation, unit testing, error handling, and production support.
- Understanding of cyber defense topics including malware, attack techniques, cloud threats, identity compromise, vulnerability management, detection logic, and incident response.
- Preferred qualifications include at least two years of security engineering experience, Google SecOps or YARA-L experience, security case management familiarity, and knowledge of cloud, networking, endpoint, identity, logging, and data pipelines.
- Candidates must be legally authorized to work in the United States; visa sponsorship is unavailable.
Benefits
- Immediate medical, dental, vision, and prescription drug coverage.
- Flexible family care days, paid parental leave, new-parent programs, subsidized backup child care, adoption and surrogacy reimbursement, and fertility benefits.
- Vehicle discount programs for employees and family members and management leases.
- Tuition assistance and active employee resource groups.
- Paid time off for community service, paid holidays including the week between Christmas and New Year’s Day, and the option to purchase additional vacation time.
- Hybrid work arrangement in southeast Michigan requiring four days per week in person; relocation may be required for candidates outside commuting distance.
Tech Stack
Categories
About Ford Motor
We don't just make history -- we make the future. Ford put the world on wheels over a century ago, and our teams are re-inventing icons and creating groundbreaking connected and electric vehicles for the next century. We believe in serving our customers, our communities, and the world. If you do, too, come move the world and make the future with us. Ford is a global company with shared ideals and a deep sense of family. From our earliest days as a pioneer of modern transportation, we have sought to make the world a better place – one that benefits lives, communities and the planet. We are here to provide the means for every person to move and pursue their dreams, serving as a bridge between personal freedom and the future of mobility. In that pursuit, our 186,000 employees around the world help to set the pace of innovation every day. Privacy Policy: https://www.ford.com/help/privacy/