Senior Threat Analyst

This is a fully remote position, open to applicants in Japan.

📋 Description

• Oversee, investigate, and react to alerts produced by the Sophos security framework, including EDR/XDR functionalities.

• Elevate and manage complex and high-severity investigations through to resolution.

• Direct technical responses to significant security incidents, coordinating containment and remediation efforts with clients and internal teams.

• Provide mentorship and guidance to Tier I and Tier II Analysts and conduct quality reviews of case work.

• Examine suspicious activities to determine scope, impact, and risk levels.

• Identify and address cyber threats across client environments utilizing authorized playbooks and tools.

• Document findings, investigative procedures, and results in the MDR case management system.

• Plan and execute hypothesis-driven threat hunts informed by threat intelligence and adversary behavior.

• Investigate phishing emails, suspicious binaries, and behavioral anomalies.

• Enhance detection capabilities by resolving false positives, coverage deficiencies, and detection logics.

• Research threat actor behaviors, MITRE ATT&CK techniques, emerging IOCs, active exploits, and vulnerabilities.

• Create and maintain playbooks, knowledge base articles, and related documentation.

• Participate in shift rotations and ensure comprehensive handovers between global teams.

• Manage case workflows and follow up with clients until resolution is achieved.

• Communicate with clients in English and Japanese through chat, phone, and tickets.

• Contribute to Security Operations processes and offer feedback on tooling.

⛳️ Requirements

• A minimum of 5 years of practical experience in a Security Operations Center (SOC), Managed Detection and Response (MDR) environment, or a cybersecurity-focused IT position.

• Demonstrated experience in leading incident response actions, including containment, mitigation, and recovery during active security incidents.

• Strong expertise with endpoint and network security tools, including EDR, XDR, IDS/IPS, and malware defense solutions.

• Practical experience in threat hunting.

• Comprehensive knowledge of adversary tactics and techniques, including obfuscation, persistence, privilege escalation, lateral movement, and evasion of defenses.

• Strong familiarity with Windows operating systems, alongside additional experience in Linux or macOS environments.

• Proficient in analyzing Windows event logs and other telemetry data.

• Solid grasp of network traffic analysis, TCP/IP, routing, switching, and relevant protocols.

• Experience in mentoring, coaching, or reviewing the work of other analysts.

• A Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent practical experience.

• Business-level proficiency in Japanese (JLPT N2 or higher, or native), both written and spoken.

• Business-level proficiency in English, both written and spoken.

• Willingness to engage in shift work, including nights, weekends, and holidays.

• Desirable qualifications include knowledge of MITRE ATT&CK, SIEM platforms, SQL, OSQuery, PowerShell, and advanced cybersecurity certifications such as GCIH, GCFA, GCIA, GREM, OSCP, or CISSP.

🏝️ Benefits

• Remote-first working model.

• Employee-led diversity and inclusion networks.

• Annual charity and fundraising initiatives.

• Volunteer days.

• Global employee sustainability initiatives.

• Global fitness and trivia competitions.

• Global wellbeing days.

• Monthly wellbeing webinars and training.

• Adjustments to the recruitment process to assist applicants with disabilities or other needs.