Security Engineer Cybersecurity Group
Job Summary
The Security Engineer in the Cybersecurity Group will focus on strengthening cyber defense systems for internal services. Key responsibilities include SOC operations, vulnerability management, and incident response. The role involves analyzing security events, refining detection rules, and coordinating with stakeholders to mitigate threats.
Responsibilities
- Manage SOC operations and SIEM logs
- Conduct vulnerability assessments
- Respond to security incidents
- Develop and update detection rules
Required Skills
- Incident response/SOC experience
- Knowledge of cyberattack vectors
- Threat intelligence analysis
- Business level English & Japanese
Job Details
### Job Description
You will be responsible for the following cybersecurity tasks:
* Collect application and network security-related events in a centralized log collection solution (SIEM).
* Use SIEM to analyze and manage events, alerts, and logs related to security incidents.
* Regularly review and update SIEM rules to ensure the detection of the latest threats.
* Collect and analyze threat information to detect potential threats.
* Continuously test and refine detection rules and methods to improve detection accuracy and reduce false positives.
* Report detection results to the CISO.
* Establish and continuously manage incident response plans and procedures.
* Respond to security incidents while coordinating with internal and external stakeholders and third-party organizations as needed.
### Development Environment
* PC: Freely selectable from Windows and Mac
* Tools: JIRA, Confluence, Slack, Zoom, Teams, etc.
### Working Hours
* Overtime: Overtime pay is provided separately (time-based system). For senior ranks, fixed overtime pay (30 hours) is included; excess is paid separately.
* Working Hours: Full flextime system with no core time (8 hours of actual work per day).
### Job Requirements
**Required:**
* Experience in incident response, cyber threat intelligence, or a Security Operations Center (SOC).
* Knowledge of cyberattack vectors, malware, and command and control (C2) mechanisms.
* Knowledge of threat intelligence.
* Imagination to conceive of various cyberattacks against our company.
* Strong communication skills to convey highly specialized cyber defense information to other stakeholders within the company and drive projects forward.
**Preferred:**
* Possession of IT security-related certifications such as CISSP, Information Security Assurance Support, or AWS Certified Security.
* Coding skills to improve work efficiency.
* Experience with Purple Team Testing.
### Desired Candidate Profile
* Ability to think independently, take initiative, and propose solutions.
* Ability to proactively learn new information and skills.
* Ability to work effectively in a team.
* English Level: Business Conversation Level (TOEIC 735-860).
* Japanese Level: Business Level (JLPT Level 2 or N2).