Application Security Engineer; Cloud

Overview

Toyota Connected is expanding our Security Team! You will be part of a highly talented group pioneering Information Security in one of today’s most innovative and highly visible industries. At Toyota Connected, Information Security is embedded within engineering teams rather than operating as a gatekeeper. We partner closely with developers to enable fast, secure delivery across cloud‑native platforms and vehicle‑adjacent systems.

This position is focused on hands‑on Application Security and Dev Sec Ops  execution, working under established security strategy and architecture while contributing practical improvements across the software lifecycle. Protecting the privacy, safety, and data of millions of Toyota and Lexus drivers is a top priority.

• Perform threat modeling and application security reviews for cloud services and APIs, including systems that interface with vehicle platforms
• Review and provide feedback on application and cloud security architecture in partnership with senior engineers and architects
• Work with engineering teams to integrate security controls into application design, CI/CD pipelines, and deployment workflows
• Implement and operate application security tooling, including SAST, DAST, dependency scanning, and container/image scanning
• Help maintain and improve application and cloud security controls to support rapid development and experimentation
• Assist in designing and validating logging, monitoring, and telemetry to support detection and response
• Develop automation scripts and integrations to improve security coverage and reduce manual effort
• Participate in an on‑call rotation to support security incident response, investigations, and remediation activities
• Collaborate with IT, Operations, and Cloud teams to deploy and operate threat detection and mitigation capabilities
• Contribute to risk and threat documentation and communicate findings to engineering partners
• Engage with Toyota’s global cloud and security organizations to support alignment and knowledge sharing

• 3+ years of experience in Application Security, Product Security, or Dev Sec Ops
• Practical experience performing threat modeling and security reviews for applications or services
• Hands‑on experience securing applications running in AWS
• Experience using Infrastructure as Code tools (Terraform, Open Tofu, Cloud Formation, Crossplane, etc.)
• Experience working with CI/CD pipelines
• Working knowledge of API security, authentication, authorization, and service‑to‑service communication
• Solid experience with Linux/Unix systems
• Ability to write clear, maintainable scripts in Python, Bash, or Power Shell
• Familiarity with modern application security practices (Secure SDLC, OWASP Top 10, etc.)
• Strong problem‑solving skills and the ability to elevate risks appropriately
• Ability to collaborate effectively with engineers and security peers
• Strong and effective written and verbal communication skills

• A career path that allows you to take your career to the next level
• Annual $2,500 training budget to help you grow and develop professional skills
• Unlimited time off and flexibility for a great work‑life balance
• Home office stipend of $1,000 to help furnish an ergonomic remote office
• Four months of paid parental leave
• Adoption assistance of $5,000 for regular adoptions or $6,000 for special needs
• 401(k) with generous company match that is fully vested day one
• Toyota and Lexus vehicle discounts
• Generous vehicle allowance for new and leased Toyota and Lexus vehicles
• Annual patent‑a‑thons and hackathons to embrace creative thinking
• Annual wellness stipend of $1,000
• Free catered lunches onsite (healthy meals and optional cheat days)
• Fully stocked Nespresso bars for coffee and tea
• No dress code
• Free covered garage parking

This position is based in Plano, Texas. Toyota Connected encourages all employees to live within a reasonable commuting distance of their assigned work location for hybrid work.

To save time applying, Toyota Connected does not offer sponsorship of job applicants for employment‑based visas or any other work authorization for this position currently.

Toyota…