Associate Solutions Consultant

主な仕事内容:

• SOC/CSIRT 運用支援コンサルティング

検知イベントに関する質問応答や、アラートの分析支援、新たな脅威に対する検知ルールの提案や策定、インシデント対応支援、CSIRTやSOCの運用改善にかかわる提案など、セキュリティ専門家としてお客様のCSIRT、SOCの運用における高度化、高機能化に対する技術的支援を行っていただきます。

• SIEM/XDR導入・運用支援コンサルティング

お客様のセキュリティ監視環境に対する脅威リスクアセスメントの実施や、セキュリティログの取り込み設計、相関ルール設計、運用フロー設計、製品導入にかかる支援、およびルールチューニングや最新脅威の取り込みなど、お客様のSOCにおけるSIEM/XDRの導入・運用をご支援いただきます。

期待する知識、経験、資格:

• SOCにおけるアラート分析に関する経験
• CSIRTにおけるインシデント対応およびCSIRT運用に関する経験
• SIEM/SOAR/XDRに関する技術的知識、導入運用経験
• セキュリティ運用全般の高度な知識
• CISSP、CEH、PMP、GIAC資格（500番台以降）等、1つ以上のセキュリティ資格

福利厚生

• Pension and Retirement Plans
• Medical, Dental and Vision Coverage
• Paid Time Off (Annual Paid leave, Summer Vacation, Birthday Leave, Child Nursing Leave, Family Care Leave, Marriage, Child/Sibling Marriage, Family Birth, Menstrual Leave, Bereavement Leave, International Business Trip, Jury Leave)
• Paid Parental Leave
• Support for Community Involvement
• 社会保険、生命保険、確定拠出年金、Benefit one, Brabo!, Mark City Office Worker Benefit, Trellix Learning Tools, Employee Referral Program

Job description:

• This is a commissioned position.
• Develops and delivers detailed IT solutions through consulting project activities.
• Responsibilities include client identification through final invoicing for engagements requiring varied interpersonal and technical skills.
• Technical responsibilities include problem identification, system architecture definition, hardware/software specification and/or design, implementation, testing, client training, and solution deployment.
• Performance is typically evaluated based on utilization, (i.e., billable hours). Project management activities include interaction with company and client managers and cost/schedule monitoring.
• May have some financial responsibilities including project cost estimating, proposal generation, and invoicing.
• May participate in sales and proposal presentations in addition to completing ongoing team account activities.
• Identifies additional product/services opportunities in customer organization.
• Performance is typically measured by the capture of the consulting engagement and/or delivery of agreed solutions within budgeted hours.

Required experience:

• More than 3 years working experience.
• At least 1 year of experience in one or more of the following security-related tasks
• CSIRT support (regulation revision, security planning, security education, security helpdesk, incident response, forensics, malware analysis, etc.)
• SOC support related (log analysis using SIEM, packet analysis, vulnerability response, etc.)
• IT/OT Security Assessment
• Investigative research on cyber security and information security
• Vulnerability diagnosis, penetration test, etc.
• work experience
• More than 2 years of experience in IT area such as system design/construction, cloud, etc. (required)
• One or more years of security consulting experience preferred.
• It is preferable to have experience in multiple security consulting projects or pre-sales for multiple security-related services.
• The following qualifications/skills
• Strong desire to learn about cyber security and information security (required)
• Communication and coordination skills with stakeholders including customers (At the moment, it is necessary to have a desire to acquire at least.)
• Passed the Basic Information Technology Engineer Examination (passing is desirable, but there is no problem if you have the same level of knowledge)
• Business level Japanese proficiency (reading, writing, speaking) is required.
• Business level English proficiency (reading, writing and speaking) preferred. (If you are not comfortable with English when joining the company, there is no problem.)