The ideal candidate will possess strong expertise in Security Operations, incident response, and threat monitoring, along with proficiency in the Japanese language to effectively collaborate with local stakeholders and clients.

This role offers an opportunity to work in a fast-paced security environment, protecting enterprise infrastructure, applications, and critical business assets against evolving cyber threats.

Key Responsibilities :

- Monitor and analyze security events and alerts generated from various security tools and technologies.

- Investigate suspicious activities, security incidents, and potential threats to determine impact and remediation measures.

- Perform triage, analysis, containment, eradication, and recovery activities during cybersecurity incidents.

- Conduct real-time monitoring and threat detection using SIEM platforms.

- Analyze logs, network traffic, endpoint activities, and security telemetry to identify indicators of compromise.

- Escalate critical incidents in accordance with established security procedures and service-level agreements.

- Support security investigations and forensic activities.

- Collaborate with internal teams, clients, and stakeholders to ensure timely incident resolution.

- Document incidents, findings, root cause analysis, and remediation actions.

- Participate in threat hunting exercises and proactive security monitoring initiatives.

- Assist in the development and enhancement of SOC processes, runbooks, and playbooks.

- Stay updated on emerging cyber threats, attack techniques, vulnerabilities, and industry trends.

- Support compliance and audit activities related to information security.

- Communicate effectively with Japanese-speaking clients and stakeholders regarding security events, incidents, and recommendations.

Required Skills and Experience :

Mandatory Skills :

- Minimum 5 years of experience in Security Operations Center (SOC) operations or cybersecurity.

- Hands-on experience with SIEM platforms such as :

1. Splunk

2. IBM QRadar

3. Microsoft Sentinel

4. ArcSight

5. Similar enterprise SIEM solutions

- Experience with :

1. Firewall technologies

2. IDS/IPS solutions

3. Endpoint Detection and Response (EDR)

4. Security Event Monitoring

- Strong understanding of :

1. Incident Response processes

2. Security Monitoring

3. Alert Triage and Analysis

4. Threat Detection methodologies

- Working knowledge of :

1. TCP/IP networking concepts

2. Windows operating systems

3. Linux operating systems

- Experience working with Japanese clients or within a bilingual work environment.

- Japanese Language Proficiency : JLPT N2 or higher (Mandatory).

- Ability to communicate effectively in both Japanese and English.

Preferred Skills :

- Experience with Security Orchestration, Automation, and Response (SOAR) platforms.

- Knowledge of cloud security concepts and services across :

1. AWS

2. Microsoft Azure

3. Google Cloud Platform (GCP)

- Experience with network packet analysis tools such as :

1. Wireshark

2. tcpdump

- Familiarity with :

1. Open-Source Intelligence (OSINT)

2. Threat Intelligence Platforms

3. MITRE ATT&CK framework

4. Threat Hunting methodologies

- Understanding of malware analysis and forensic investigation concepts.

Educational Qualification :

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.

- Relevant cybersecurity certifications such as CEH, Security+, CySA+, GCIH, Splunk Certification, or GIAC certifications will be an added advantage.

Key Competencies :

- Strong analytical and problem-solving skills.

- Ability to work in a 24x7 SOC environment if required.

- Excellent communication and stakeholder management capabilities.

- Strong attention to detail and investigative mindset.

- Ability to perform effectively under pressure in critical incident situations.