Toyota Tsusho Europe

• Install, maintain, and support anti-malware on all network storage devices – ensuring complete coverage in environment. Monitor/remediate malware alerts. Ensure alerts/logs are defined and are successfully sent to SIEM. • Check daily scheduled jobs and services for errors/issues. Open support cases with vendors, as needed. See remediation of issues to end. • Review event collection on all monitored devices to ensure complete coverage. Correct any issues to prevent event loss. • Monitor CVEs related to data security software and related to Windows/Linux OSes. Follow software vendor’s releases. Install updates and patches in a timely manner to ensure vulnerability gaps are closed. Implement other countermeasures where updates are not yet released for vulnerabilities. • Run projects to identify and remediate data that has excessive access permissions. • Collaborate with internal teams (such as server, storage, collaboration, active directory, business units, etc.) to accomplish project objectives and provide support/expertise on storage security. • Provide support to Collaboration team to place data classification labels on data. • Provide requested reports to users. Examples include, but not limited to: • Show all activity for user in provided timeframe. • Determine how files on a share\folder disappeared and who did it. • Provide a report of stale data. • Show where sensitive files exist with open permissions. • Display where files exist containing SSNs or Credit Card numbers. • Collaborate with and assist internal Cyber teams, such as Incident Detection, Incident Response, Investigation, and Data Loss Prevention on data security needs. • Use data security software to define alerts of anomalous activity and ensure alerts are sent to SIEM. • Perform health checks on servers, monitor resource usage, and proactively request additional resources to ensure optimal performance. • Work with Incident Detection, Incident Response, Investigation, and Data Loss Prevention teams – providing needed data out of data security tools. • Manage implementation of data security hardware/software at new sites from start to end, including submission of firewall rule modification request. • Manage and support host-based intrusion detection systems.

• Design, implement, and maintain secure Infrastructure as Code solutions for cloud and containerized environments supporting AI security workloads. • Own and manage EKS clusters, including node group configurations, networking policies, RBAC, and pod security standards to support secure AI model development and deployment. • Develop and maintain hardened Terraform modules, configurations, and reusable infrastructure patterns with built-in security controls (e.g., least-privilege IAM, encryption-at-rest, network segmentation). • Build and manage Docker images and Helm charts with security-first principles—image scanning, minimal base images, secrets management, and signed artifacts. • Integrate security guardrails into CI/CD pipelines, including automated policy checks (e.g., OPA/Gatekeeper, Checkov, tfsec) for infrastructure deployments. • Automate environment provisioning, scaling, configuration, and release processes with a focus on immutable infrastructure and drift detection. • Collaborate with AI security engineers, platform teams, and DevSecOps to ensure infrastructure supports threat modeling, vulnerability management, and incident response requirements. • Troubleshoot and remediate infrastructure security issues across Kubernetes, Terraform, CI/CD, and container platforms. • Enforce infrastructure compliance with organizational security policies, regulatory frameworks (e.g., NIST, CIS Benchmarks), and operational best practices. • Document secure infrastructure patterns, deployment runbooks, and automation workflows for the AI security development team.

• Manage incident operations including tracking, note-taking, and preparing lessons learned to ensure compliance with governance standards. • Serve as Communication Liaison during cyber incidents, drafting clear, high-quality reports for global executive audiences under tight deadlines. • Collaborate with TRRAC and stakeholders to create and maintain knowledge articles and process documentation. • Lead technical projects by gathering requirements, developing plans, tracking progress, providing updates, and driving initiatives to completion with minimal supervision. • Support regular and ad hoc reporting requirements for the TRRAC program. • Develop training materials and presentations aligned with company and TRRAC branding to facilitate knowledge sharing and training.

We are seeking a highly detail-oriented and inquisitive Cybersecurity Operations Coordinator to join our Threat Research, Response, and Analysis Center (TRRAC) team. This role supports cyber threat intelligence and incident response initiatives, providing critical support to Incident Commanders and Analysts throughout the incident lifecycle. Positioned within the Operations Coordination and Communications (OCC) function, you will serve as TRRAC’s operational subject matter expert, ensuring adherence to the Incident Response Plan and cybersecurity frameworks. The ideal candidate thrives in fast-paced, ambiguous environments and possesses strong writing skills to clearly communicate complex cyber incidents to both technical and non-technical global audiences, while also organizing and maintaining long-term project goals. You will balance executing small critical tasks with driving large-scale initiatives. Key Responsibilities: - Manage incident operations including tracking, note-taking, and preparing lessons learned to ensure compliance with governance standards. - Serve as Communication Liaison during cyber incidents, drafting clear, high-quality reports for global executive audiences under tight deadlines. - Collaborate with TRRAC and stakeholders to create and maintain knowledge articles and process documentation. - Lead technical projects by gathering requirements, developing plans, tracking progress, providing updates, and driving initiatives to completion with minimal supervision. - Support regular and ad hoc reporting requirements for the TRRAC program. - Develop training materials and presentations aligned with company and TRRAC branding to facilitate knowledge sharing and training.

• Developing and refining internal red team scripts, tools, and methodologies to enhance offensive security operations. • Research, validate, and exploit known attacks, vulnerabilities, and security weaknesses using custom-built or existing tools. • Conduct thorough Red Team assessments targeting on-premises infrastructure, cloud environments, and enterprise threat landscapes. • Identify vulnerabilities across software, systems, networks, and business logic through simulated adversarial tactics. • Design and execute complex threat emulation scenarios incorporating physical, social engineering, and digital attack vectors. • Produce detailed, accurate, and actionable reports and presentations tailored for both technical teams and executive leadership. • Collaborate closely with other security teams to support remediation efforts and improve overall security posture. • Stay current with emerging threats, attack techniques, and security technologies to continuously evolve red team capabilities. • Conduct Purple Team exercises in collaboration with partner security teams to identify and improve the organization's security posture.