Infrastructure Security Engineer

The Cybersecurity team is a strategic function within TME’s IT & Digital division, supporting the transformation of Toyota’s European IT operations. This team contributes to resilient security frameworks, manages cyber risks in a modern enterprise environment, and builds a proactive security culture across digital assets and operations. The team's mission is to protect Toyota’s information assets, support regulatory compliance, and enable secure innovation across the organization.

• Relevant experience in infrastructure security, network security, or related field.
• Experience hardening operating systems (Windows, Linux, MacOS), mobile, or cloud-connected endpoints in structured IT/security functions.
• Experience working in enterprise or complex environments with diverse stakeholders and technologies.
• Experience with network segmentation, firewalling, and remote connectivity.
• Experience analyzing security baselines and remediating deviations.
• Understanding of secure OS configuration, compliance baselines, and endpoint lifecycle management including servers and mobile devices.
• Experience with endpoint protection technologies such as anti-malware, EDR, and device control.
• Experience with vulnerability management processes including risk-based prioritisation and remediation tracking.
• Understanding of security controls for server, virtualization, storage, and data-centre infrastructure.
• Practical scripting or automation experience using PowerShell, ideally Python or Bash.
• Experience with AI use cases in infrastructure security including security monitoring, vulnerability prioritization, incident triage, anomaly detection, and automation.
• Ability to explain technical concepts to various audiences.
• Strong collaboration and proactive mindset.

Desirable:

• Familiarity with hybrid-cloud security concepts, cloud-connected infrastructure, and cloud-native security controls.
• Familiarity with security hardening frameworks such as CIS, ISO 27001, NIST or equivalent.

Optional Certifications:

• CompTIA Security+, EC-Council Certified Network Defender (CND), GIAC Security Essentials (GSEC), Certified Information Systems Security Professional (CISSP), or equivalents.

• Act as Technical Lead for Cybersecurity projects in Network security, Remote Connectivity, Vulnerability Protection, and Endpoint Security.
• Support and improve endpoint security controls such as device hardening, endpoint protection, firewall policies, and compliance baselines.
• Develop, review, and audit security/compliance baselines, guide endpoint and infrastructure teams on implementation, evaluate and document exceptions.
• Review, design, and develop Technical Security landscape as Technical lead in Infrastructure Security team.
• Investigate and resolve security issues on endpoints and infrastructure including security alerts, malware events, and vulnerability reports.
• Collaborate with infrastructure, identity, network, and security teams on controls like VPN, DLP, certificate-based authentication, and cloud-connected device policies.
• Create and maintain documentation and guidance, contribute to knowledge sharing and continuous improvement.
• Develop, monitor, and report on Security KPIs.