Security Engineer - Detection & Response (Japan)

You will be responsible for leading day-to-day security threat management at xAI's Tokyo centre. This involves identifying and managing potential incidents, working with partner teams on known or suspected security threats, and supporting threat intelligence, threat hunting, intrusion detection, and incident response efforts.

Responsibilities include:

• Certifications like CISA, CRISC, CGEIT, Security+, CASP+, or similar.
• Driving continual improvement in processes, procedures, and automations to improve the quality and effectiveness of the team.
• Participating in a 24/7 on-call rotation performing security incident response.
• Commandeering security incidents and updating stakeholders.
• Identifying and developing new detection use cases and optimising existing detections.
• Collaborating on technical directions and solutions with other teams.
• Researching and analysing patterns in security events across xAI's global infrastructure.
• Identifying, designing, and leading threat hunting missions to quantify and reduce threats.
• Managing and supporting the log collection, security scanning, intrusion detection, and other security-related systems.
• Designing and assisting in the development of automation to reduce false positives and handle events automatically.
• Analysing the security posture of systems via testing and vulnerability impact analysis.

Basic qualifications include:

• 2+ years of relevant information security experience.
• Being a self-starter, able to receive a task and execute with minimal supervision.
• Having strong Python scripting skills for implementing security automation.
• Knowledge of networking and macOS, Windows, or Linux operating systems.
• Knowledge of cloud security fundamentals and practices (vendor agnostic).
• Experience managing and/or deploying security technology.
• Experience with building queries and dashboards for security monitoring.
• Knowledge of current threats and techniques and a desire to research and learn more.
• Experience with malware analysis, forensics, or penetration testing.
• Problem-solving skills or experience with troubleshooting.

Preferred skills and experience include:

• Elastic/OpenSearch or similar platforms.
• Open Source security automation tooling.