Security Engineer - Detection & Response (Japan)

ABOUT THE ROLE:

You will be responsible for leading day-to-day security threat management. You will help identify and manage potential incidents and work with partner teams on known or suspected security threats. You will support threat intelligence, threat hunting, intrusion detection, and incident response efforts that adhere to, and push forward, best practices. 

RESPONSIBILITIES:

• Certifications like CISA, CRISC, CGEIT, Security+, CASP+, or similar preferred.
• Drive continual improvement in processes, procedures and automations to improve the quality and effectiveness of the team.
• Participate in a 24/7 on-call rotation performing security incident response
• Commandeering security incidents and updating stakeholders.
• Identify and develop new detection use cases and optimize existing detections.
• Collaborate on technical directions and solutions with other teams.
• Research and analyze patterns in security events across X’s global infrastructure.
• Identify, design, and lead threat hunting missions to quantify and reduce threats.
• Manage and support the log collection, security scanning, intrusion detection, and other security-related systems.
• Design and assist in the development of automation to reduce false positives and handle events automatically.
• Analyze the security posture of systems via testing and vulnerability impact analysis.

BASIC QUALIFICATIONS:

• 2+ years of relevant information security experience
• Self starter, can receive a task and execute with minimal supervision
• Strong Python scripting skills for implementing security automation
• Knowledge of networking and macOS, Windows or Linux operating systems.
• Knowledge of cloud security fundamentals and practices (vendor agnostic).
• Experience managing and/or deploying security technology.
• Experience with building queries and dashboards for security monitoring.
• Knowledge of current threats and techniques and a desire to research and learn more.
• Experience with malware analysis, forensics or penetration testing.
• Problem solving skills or experience with troubleshooting.

PREFERRED SKILLS AND EXPERIENCE:

• Elastic / OpenSearch or similar platforms 
• Open Source security automation tooling