Engineer, Information Security Operations

Job Description

The Information Security Operations Engineer is responsible for the daily operation and continuous improvement of MNAO's endpoint security and vulnerability management program. This role ensures endpoint protections are effectively configured, maintained, and enforced to safeguard against evolving threats, while overseeing detection, prioritization, and remediation of vulnerabilities across Mazda North American Operations (MNAO) and regional environments. Working closely with the Security Operations Center (SOC), Operations & Risk, and Security Engineering teams to integrate endpoint protection and vulnerability management into broader enterprise operations, develop key performaince indicators (KPIs) and service level agreements (SLAs) to drive remediation performance, and strengthen MNAO's overall cybersecurity posture and compliance with organizational and regulatory requirements.

• (50%) Security Operations
  • Maintain endpoint security tools, configurations, and standards across the enterprise.
  • Lead detection, prioritization, and remediation tracking in partnership with infrastructure and application teams.
  • Actively participate in endpoint-related incident response, collaborating with the SOC to detect, contain, and remediate threats in real time.
  • Support endpoint threat hunting, forensic analysis, and root-cause investigations with security engineering teams.
  • Facilitate vulnerability management activities for MNAO and regional offices, ensuring consistent remediation processes and risk reduction.
  • Track KPIs and SLAs to measure remediation effectiveness, drive accountability, and report progress to leadership.
  • Support reduction of endpoint vulnerabilities and misconfigurations across all environments.
  • Improve mean time to detect/respond MTTD/MTTR (Mean Time to Detect/Mean Time to Repair/Resolve) for endpoint-related incidents.

• (25%) Process Improvement
  • Continuously tune endpoint security controls (e.g., endpoint detection and response, antivirus, host-based firewalls) to adapt to emerging threats.
  • Evaluate new tools, automation opportunities, and processes to strengthen endpoint security maturity.
  • Increase automation and integration with SOC and security engineering.
  • Provide input and support the overall advancement of the endpoint security strategy.

• (15%) Compliance/Control
  • Maintain compliance with security frameworks (e.g., NIST CSF 2.0, ISO 27001, NYCRR 500) and ensure accuracy of the Configuration Management Database (CMDB).
  • Partner with Governance, Risk, and Compliance (GRC) to meet regulatory requirements and align security controls with enterprise standards.
  • Ensure MNAO meets and makes progress to exceed endpoint compliance and target thresholds.

• (10%) Communication & Reporting
  • Deliver regular reports on endpoint health, compliance, and overall security posture to leadership and cross-functional stakeholders.
  • Collaborate with executive leadership and influence enterprise-wide security initiatives.

• Perform other duties as assigned
• Comply with all policies and standards
• The preceding functions have been provided as examples of the types of work performed by employees assigned to this job classification. Management reserves the right to add, modify, change or rescind the work assignments of different positions and to make reasonable accommodations so that qualified employees can perform the essential functions of the job

• 5+ years experience in systems administration and security operations required
• 5+ years experience with endpoint security technologies (e.g., endpoint detection and response, antivirus, host-based firewalls) required
• 3+ years experience with SIEM (Security Information and Event Management), SOAR (Security Orchestration, Automation and Response), IDS/IPS (Intrusion Detection/Prevention System), and cloud monitoring solutions required
• 3+ years experience with vulnerability management and asset management required
• IT support experience in the automotive industry preferred

• Bachelor of Science (BS) Information Technology Preferred
• Bachelor of Science (BS) Computer and Information Science Preferred
• An equivalent mix of education, training, and/or…