Japanese Bilingual Global Incident Response Analyst | Japanese IT consulting company

A Japanese IT consulting company in Tempe, Arizona is seeking a Global Incident Response Analyst.

＜Job Responsibilities＞
As a bilingual Japanese-English Global Incident Response (GIR) Analyst, you will primarily be responsible for the following duties.
(1) Cybersecurity Incident Response
・Analyze security-related data and evidence to identify intrusion methods and root causes, determine optimal solutions, and drive security improvements.
・Respond to security incidents by applying specialized knowledge of incident response.
・Utilize theoretical and practical knowledge of operating systems such as macOS, Linux, and Windows, as well as cloud environments.
・Collect, analyze, and correlate security data.
・Apply qualitative and quantitative analytical skills and logical thinking to solve problems.
・Demonstrate creative problem-solving skills to address security challenges.
・Handle the overall process of monitoring and investigating security events and responding to incidents.
・Use various tools and technologies to investigate potential cybersecurity events across multiple system environments.

(2) Security Monitoring and Threat Analysis
・Review internal system logs and alerts to identify potential cybersecurity events.
・Perform initial incident assessments (triage) based on automated detection alerts and determine whether escalation to other teams is necessary.
・Monitor the activities of external service providers to detect potential cybersecurity events.
・Analyze security data collected from various systems in real time to detect and prevent threats, unauthorized access, and other security violations.
・Analyze compromised systems and restore them to a secure state.
・Investigate network traffic to identify malicious activities and signs of compromise.
・Assist with investigations involving internal employees or third parties.
・Prepare analytical reports on emerging and ongoing threats that may affect the company.
・Research the latest cyberattack methods, tools, and vulnerabilities, and apply the findings to information security measures.

(3) Security Policies and Risk Management
・Participate in the development of information security policies, standards, and procedures.
・Apply an understanding of offensive security techniques, including common cyberattack methods.
・Analyze multiple datasets across different sources to identify and correlate evidence related to individual security events.
・Utilize broad knowledge of product security and information security.
Areas of focus include:
・Organizational structure and administration
・System development and maintenance procedures
・Software and hardware security management
・Access control
・Computer system operations
・Physical and environmental security measures
・Backup and disaster recovery procedures
Additionally, utilize knowledge of security and regulatory frameworks such as CRI, ISO 27001, NIST 800 Series, FFIEC, SOC 2, and STAR.

(4) Compliance and Audit Support
・Respond to inquiries from IT risk management departments and internal and external auditors.
・Ensure that required documentation is properly maintained and complies with information security policies.
・Prepare reports analyzing internal and external activities and trends.
・Support the development of detection rules, response playbooks, and automation processes for security operations.
・Support threat detection, monitoring, response, and digital forensic investigations to ensure they are conducted in accordance with best practices.
・Minimize gaps in security monitoring and response to promote comprehensive threat protection.

(5) Team Collaboration and Continuous Improvement
・Efficiently manage multiple tasks and provide guidance to junior analysts as needed.
・Stay up to date on the latest developments in information security programs and industry frameworks.
・Continuously learn about organizational changes, industry trends, and the latest security measures, and incorporate this knowledge into daily operations.

＜Requirements＞
・Strong communication skills in both Japanese and English, with an understanding of the cultural backgrounds of both languages.
・Bachelor’s degree in Information Technology (IT), Cybersecurity, Computer Science, or a related field.
・At least 5 years of professional experience in cybersecurity operations or information security.
・Excellent analytical, problem-solving, and time management skills.
Candidates without at least 5 years of cybersecurity experience may still be considered if they have sufficient experience in the IT industry or in risk management and incident management.

＜Preferred Qualifications＞
Certifications:
・CISSP (Certified Information Systems Security Professional)
・ISSMP (Information Systems Security Management Professional)
・SANS-related certifications
・GIAC-related certifications
・GCIA (GIAC Certified Intrusion Analyst)
・CISM (Certified Information Security Manager)
・CEH (Certified Ethical Hacker)
・GCFA (GIAC Certified Forensic Analyst)
・GCFE (GIAC Certified Forensic Examiner)
・GCIH (GIAC Certified Incident Handler)
・GSEC (GIAC Security Essentials)

Experience in the Security Field:
・Incident response and digital forensics
・Security governance and oversight
・Security risk management
・Network security
・Threat and vulnerability management
・Information security audits, reviews, and risk assessments

【Keywords】
①Cybersecurity Operations
② Information Security
③Japanese and English bilingual