Cyber Threat Emulation Operator, Lead

Other Jobs To Apply

No other job posts for this day.

About the position

Overview Who we are Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us. An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment. To save time applying, Toyota does not offer sponsorship of job applicants for employment-based visas or any other work authorization for this position at this time. Who we’re looking for The Toyota Financial Services Information Security Department is looking for a passionate and highly motivated Cyber Threat Emulation Lead. Reporting to the National Manager of Threat Emulation & Investigations, this role will collaborate with other Red Team operators to simulate threat actor techniques. The primary focus is to evaluate and enhance cyber defenses through Red Team operations, penetration testing, and technical control assessments. Additionally, this role supports global shared security services and collaborates with TFS Group companies as needed. This role is an in-office position based at our Plano, TX headquarters. Candidates are expected to live within a commutable distance to Plano and work on-site Monday through Thursday, with hybrid work options available on Fridays.

Responsibilities

  • Design and execute red team operations to test the quality of our cyber controls using threat actor techniques
  • Create detailed reports capturing the results of operations and/or penetration tests with appropriate evidence and mitigation strategies
  • Partner with key stakeholders, including technology owners and other security teams, to share results, provide insights, and improve the readiness of detection and response capabilities
  • Effectively evaluate the risk of identified findings for remediation prioritization
  • Leverage your technical skillset to provide assistance and guidance to security events as needed
  • Stay current on global cyber trends/attacks for application to the Toyota environment
  • Serve as a role model for continuous learning, cooperation, and knowledge sharing with teammates
  • Building a trusting and safe environment where problems can be raised without fear of blame, retribution, or being judged, with an emphasis on problem-solving

Requirements

  • A curious mindset and desire to learn
  • At least seven (7) or more years of experience in one or more of the following domains: Red Team operations (Kali, Cobalt Strike, Outflank, Brute Ratel, Sliver, Nighthawk) Software development OffSec infrastructure management Penetration testing (network/web/mobile: Nessus, Qualys, Burp Suite) Reverse engineering Social Engineering Cloud, AI
  • Suitable for executive engagement and the capability to influence and encourage prioritization of security initiatives
  • Bachelor’s Degree from an accredited institution, or equivalent experience

Nice-to-haves

  • Relevant security certification (CRTO, OSCP, OSWE, CISSP)
  • Familiarity with security frameworks for attack (MITRE ATT&CK, Cyber Kill Chain), threat modeling (STRIDE, CVSS), and guidance (NIST, PCI).
  • Understanding of regulatory issuances, such as CFPB, GLBA and SOX, and their applicability to technologies, applications and privacy laws (GDPR & CCPA) and other legal and compliance privacy and information security requirements.
  • Advanced degree with a concentration in an IT related area.

Benefits

  • A work environment built on teamwork, flexibility, and respect
  • Professional growth and development programs to help advance your career, as well as tuition reimbursement
  • Team Member Vehicle Purchase Discount
  • Toyota Team Member Lease Vehicle Program (if applicable)
  • Comprehensive health care and wellness plans for your entire family
  • Flextime and virtual work options (if applicable)
  • Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute
  • Paid holidays and paid time off
  • Referral services related to prenatal services, adoption, childcare, schools and more
  • Flexible spending accounts
  • Relocation assistance (if applicable)
Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...