Threat Detection Analyst, Japanese Speaking

This is a fully remote position, open to applicants in Australia.

📋 Description

• Oversee traffic monitoring, identify complex anomalies, and implement real-time countermeasures against DDoS, Bot, and Web Application threats.

• Spearhead the identification and resolution of significant security incidents.

• Evaluate intricate traffic patterns and establish rate limiting along with tailored WAF and security protocols.

• Act as the primary security advisor for Managed Security Service clients.

• Continuously optimize and adjust security policies to enhance detection effectiveness.

• Uphold a robust security posture customized for each client's specific environment.

• Perform data-driven investigations through log analysis to reveal potential threats and areas for enhancement.

• Create detailed After Action Reports and monthly security overviews.

• Convert telemetry and attack information into actionable insights for customer stakeholders.

• Serve as the subject matter expert during ongoing security incidents.

• Offer clear guidance through real-time communication channels.

⛳️ Requirements

• Thorough understanding of the OWASP Top 10 and advanced attack vectors, including Credential Stuffing, API Abuse, and Layer 7 DDoS.

• Capacity to interpret raw payloads to differentiate between malicious and legitimate traffic.

• Extensive technical expertise in HTTP/S, TCP/IP, DNS, and TLS.

• Proficient in analyzing handshake processes, header formats, and status codes.

• Systematic approach to digital forensics and incident response.

• Ability to correlate data points within JSON or CSV logs to reconstruct an attack narrative.

• Skilled in communicating complex technical findings clearly and professionally to both technical and non-technical audiences.

• Must be available during core business hours.

• Availability required from Tuesday to Saturday, 10 am to 6 PM AEST and 11 am to 7 PM AEDT.

• Proficiency in Japanese is a plus.

• Knowledge of Python or Bash for log parsing and workflow automation is advantageous.

• Experience with Infrastructure as Code/Security as Code (Terraform) or edge-based configurations is favorable.

• Possession of industry-recognized certifications such as CompTIA CySA+, GCIH, or Security+ is desirable.

• Submission of a fully completed application along with a resume or CV is mandatory.

🏝️ Benefits

• Comprehensive benefits package tailored to meet the needs of employees; offerings may vary based on the country of employment.

• Benefits commence on the first day of employment.

• Supportive and positive work atmosphere.

• Inclusive and diverse workplace culture.

• Reasonable accommodations available for applicants and employees with disabilities.