Incident Response Engineer

This is a fully remote position, open to applicants in Japan.

📋 Description

• Serve as the main coordination point between clients and DFIR consultants during active cybersecurity incidents.

• Organize and lead incident scoping calls with clients to comprehend incidents, define requirements, and engage the necessary DFIR resources.

• Oversee incident response activities from the initial engagement phase through investigation, remediation, and closure.

• Collaborate with DFIR consultants to understand investigation progress, set priorities, recognize dependencies, and ascertain client requirements.

• Ensure clear communication with clients throughout incidents, encompassing status updates, next steps, outstanding actions, and information needs.

• Facilitate meetings, incident updates, deliverables, and follow-up actions between clients and internal technical teams.

• Assist clients in gathering and supplying information, logs, system access, and technical context required by DFIR consultants.

• Monitor actions, decisions, dependencies, and outstanding tasks throughout the incident lifecycle.

• Identify delays, communication gaps, or obstacles and resolve or escalate them to the appropriate stakeholders.

• Convert technical investigation updates into clear language suitable for clients.

• Translate incident reports, investigation updates, and client communications from English into Japanese when necessary.

• Aid in the preparation and delivery of client updates, investigation reports, and incident debriefing sessions.

• Collaborate with Threat Intelligence, Technical Testing, Managed Detection and Response, and other cybersecurity teams.

• Help ensure a consistent, professional, and well-coordinated experience for clients during stressful incidents.

⛳️ Requirements

• Minimum of 3 years of experience in cybersecurity, information technology, security operations, incident management, technical support, or a related technical field.

• Experience in supporting, coordinating, or working with cybersecurity incidents is highly regarded.

• Strong knowledge of cybersecurity fundamentals and commonly used security technologies.

• Good understanding of enterprise IT environments, including Windows, networking, identity, cloud services, and security technologies.

• Ability to comprehend and discuss cybersecurity incidents with technical specialists without personally conducting digital forensic investigations.

• Excellent customer-facing communication skills and experience interacting with clients during technical or security incidents.

• Experience in coordinating technical activities that involve multiple teams and stakeholders.

• Strong organizational skills with the ability to manage multiple activities, priorities, and dependencies during time-sensitive situations.

• Capability to communicate complex technical information clearly to stakeholders with varying levels of technical knowledge.

• Confidence in engaging with clients during high-pressure or business-critical circumstances.

• Native-level proficiency in Japanese, with professional proficiency in English.

• Desirable: experience in a Security Operations Centre, Managed Security Service, Incident Response, cybersecurity consulting, technical account management, or a similar environment.

• Desirable: previous experience in coordinating cybersecurity incidents, major IT incidents, or other technical response activities.

• Legal authorization to work in Japan without the need for employer sponsorship.

🏝️ Benefits

• Remote-first working model, with remote work being the primary option for most employees.

• Employee-led diversity and inclusion networks.

• Annual charity and fundraising initiatives and dedicated volunteer days.

• Global employee sustainability initiatives.

• Global fitness and trivia competitions.

• Global wellbeing days.

• Monthly wellbeing webinars and training sessions.

• Adjustments available in the recruitment and selection process to support applicants.