Job Description:
Cybersecurity Operations Analyst
Location: Allen Park or Dearborn, Michigan (HYBRID - Onsite 4 days a week)
Role Overview
This role within our client's organization is responsible for hands-on operational monitoring and incident response for connected vehicle and cloud environments. As part of the Product Security Operations Center (PSOC) team, you will triage alerts, support investigations, and help drive timely resolution across vehicle telematics, embedded systems, and cloud-native application stacks. We are seeking candidates with a cybersecurity foundation, including API security experience, along with embedded-vehicle exposure or a demonstrated aptitude to learn.
Key Responsibilities
Perform daily PSOC alert triage and support incident coordination, containment, remediation, recovery, and closure.
Support investigations of security events across cloud application stacks and embedded vehicle architectures using available logging and telemetry.
Partner with PSOC teams across regions to deliver consistent monitoring, investigation, and incident-response services; maintain effective continuity and handoffs for active security events.
Surface operational friction points and provide feedback to help improve detection logic, tooling, and response workflows.
Collaborate closely with the Cyber Incident Response Team (CIRT), Product Development, and Enterprise IT to execute response playbooks and coordinate complex mitigations.
Required Qualifications
Education: Bachelor's Degree in Computer Science, Cybersecurity, or Engineering, or a related field.
Experience: 3 to 5 years' experience in a relevant field. 2+ years in cybersecurity, security operations, or a related technical field. A working understanding of incident response lifecycles, escalation, and incident management practices. Experience with API security and exposure to cloud security operations on one or more major cloud platforms, including logging, monitoring, identity, and response workflows. Embedded vehicle cybersecurity exposure, or a demonstrated aptitude and eagerness to learn. Ability to work effectively in a fast-paced 24x7 operations environment, including shift-based coverage. Clear written and verbal communication for documenting incidents and coordinating with the technical team.
Technical Skills: Cyber Security, API, Information Security.
Preferred Qualifications
Exposure to detecting and investigating threats across cloud and vehicle telemetry data, including log correlation and alert tuning.
Experience using or refining runbooks, playbooks, and escalation procedures in an operations setting.
Relevant certifications such as Security+, GIAC, or foundational cloud security certifications across AWS, Azure, or GCP.
Familiarity with embedded or automotive environments and the security considerations of cloud architecture.
Ability to turn recurring incidents into process or detection improvement suggestions.
Certification Program
Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.
Everforth Apex uses a virtual recruiter as part of the application process. Click
