Security Engineer - Japanese Speaker

Acts as a first responder for services in scope. Responsible for EVTM and INCM triage and first-line resolution Monitor logs, review alerts, and identifying and escalating incidents that require higher-level support. Assess the latest security alerts to determine implications and urgency. Create and run search queries in SIEM tool to help with identifying and troubleshooting security issues. Receives and acknowledges Events and Incidents for clients and services in scope through multiple channels (through automated systems, workflow tools, and human interaction) Provides 24x7x365 security operations services. Monitors managed environments primarily through Security Information and Event Management (SIEM), utilizing a “single pane of glass” approach where supported, and through service delivery tools for each SOC service in scope, including but not limited to Intrusion Detection and Prevention Systems (IDS/IPS), Endpoint Security, Firewall, Proxy, and Advanced Persistent Threat (APT) solutions Responsible for the extraction of logs for log sources in scope and performing basic analysis Responsible for performing routine security infrastructure health checks Responsible for generating basic reports Investigate and provide technical analysis of various security incidents and possible compromise of systems. Provide recommendations for responding to malware incidents. Work directly with other SOC Incident Responders, NOC, Network and Firewall Engineers for issue resolution. Ensure that all SOC (Security Operations Center) tickets are handled and resolved within SLAs (Service Level Agreements). Communicate with customers, peers, team and managers regarding incident and change management. Assess and identify appropriate solutions to be integrated into the systems operation and make recommendations for implementation and troubleshooting.