PSOC Monitoring Analyst

Reporting to the Manager of Monitoring Global, this role focuses on frontline alert triage, incident support, and continuous improvement of our monitoring processes. We are looking for a solid background in API and cybersecurity experience with either embedded vehicle exposure or a strong aptitude to learn. You will partner across cloud, vehicle, and enterprise teams to help ensure rapid, effective problem resolution for connected vehicles and the cloud services that power them. Operational Monitoring and Incident Response: Perform daily PSOC alert triage and support incident coordination, containment, remediation, recovery, and closure. Cloud Embedded Investigation and Resolution: Support investigations of security events across cloud application stacks and embedded vehicle architectures using available logging and telemetry. Global Coverage Contribution: Contribute to Fords follow-the-sun operating model, executing shift handoffs, and sustaining continuous worldwide coverage. Operational Improvement and Feedback Loop: Surface operational friction points and provide feedback to help improve detection logic, tooling, and response workflows. Cross-Functional Partnership: Collaborate closely with the Cyber Incident Response Team (CIRT), Product Development, and Enterprise IT to execute response playbooks and coordinate complex mitigations. Bachelors degree in Computer Science, Cybersecurity, or Engineering, or related field. 2+ years in cybersecurity, security operations, or a related technical field. Working understanding of incident response lifecycles, escalation, and incident management practices. Experience with API security and exposure to cloud security operations on one or more major cloud platforms, including logging, monitoring, identity, and response workflows. Embedded vehicle cybersecurity exposure, or a demonstrated aptitude and eagerness to learn. Ability to work effectively in a fast paced 24x7 operations environment, including shift-based coverage. Clear written and verbal communication for documenting incidents and coordinating with technical teams.