Incident Response Engineer

Starting this year, we are focusing on reversing the adversaries advantage with the establishment of a new team.   As an Incident Response Engineer, your mission is to build and develop innovative and industry leading capabilities related to investigation and strategic engagement of threat actors.  This is a role and opportunity is for those who are passionate about pushing the industry forward and raising the bar for Incident Response.

We are expanding this new team with Associate-level and Senior-level positions.

What you will do

• Conduct log analysis, host forensics, network forensics, and malware triage in support of ongoing Incident Response investigations using  advanced response tooling
• Utilize  proprietary IR technology to conduct large-scale investigations across both the EDR and Digital Forensic evidence landscape
• Assist with every stage of Incident Response lifecycle, including: scoping, analysis, remediation, reporting, and tactical communications
• Contribute technical content such as playbooks, scripts, and automation tooling to enhance IR processes, investigation workflows, and IR infrastructure
• Conduct research into forensic artifacts, behavioural analysis and threat hunting techniques and implement them in the IR investigations platform

Requirements

What we are looking for

• Associate level: Minimum 2 years of Incident Response or comparable industry experience (threat hunting, threat detection and response, malware analysis, etc.)
• Senior level: Minimum 8 years of Incident Response or comparable industry experience (threat hunting, threat detection and response, malware analysis, etc)
• Bachelor's degree in a technical field, or equivalent practical experience
• Fluent in either Japanese OR English.
• Experience interfacing and communicating directly with technical customers.
• Knowledge and experience with
  • at least one scripting or development language (such as Python)
  • investigations of at least one major OS family (Windows, Mac OS, *nix)
• ...plus at least two of the following (for Associate-level) and all of the following (for Senior-level):
  • Digital forensics (disk and memory collection & analysis)
  • Network Security Monitoring (NSM), network traffic analysis, and log analysis
  • Static and dynamic malware analysis
  • Threat Hunting with EDR
  • Data Science with Jupyter, Pandas, etc
  • Threat Intelligence and adversary tracking