Incident Response Engineer

🔥 0 minutes ago

🇯🇵 Japan – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Sophos

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1985

💼 Consulting

🏥 Healthcare

🏭 Manufacturing

💰 Post-IPO Equity on 2021-08

Consulting • Healthcare • Manufacturing

Sophos is a leading cybersecurity company that specializes in protecting businesses against advanced cyber threats. The company offers a comprehensive suite of security solutions, including endpoint protection, managed detection and response (MDR), network security, and cloud security. With a prevention-first approach, Sophos aims to stop ransomware and other cyber threats before they cause harm. Sophos provides services such as threat research, security training, and operational support to ensure robust defense against cyberattacks. Their solutions cater to various industries including finance, healthcare, government, manufacturing, and retail. The Sophos Central platform delivers centralized security management, integrating seamlessly with existing IT infrastructure to enhance security posture.

📋 Description

• Act as a primary coordination point between customers and DFIR consultants during active cybersecurity incidents • Coordinate and host incident scoping calls with customers to understand incidents, establish requirements, and engage appropriate DFIR resources • Coordinate incident response activities from initial engagement through investigation, remediation, and closure • Work with DFIR consultants to understand investigation progress, priorities, dependencies, and customer requirements • Maintain clear customer communication throughout incidents, including status, next steps, outstanding actions, and information requirements • Coordinate meetings, incident updates, deliverables, and follow-up activities between customers and internal technical teams • Help customers gather and provide information, logs, system access, and technical context required by DFIR consultants • Track actions, decisions, dependencies, and outstanding items throughout the incident lifecycle • Identify delays, communication gaps, or blockers and resolve or escalate them with appropriate stakeholders • Translate technical investigation updates into clear, customer-appropriate language • Translate incident reports, investigation updates, and customer communications from English into Japanese when required • Support preparation and delivery of customer updates, investigation reports, and incident debriefing sessions • Coordinate with Threat Intelligence, Technical Testing, Managed Detection and Response, and other cybersecurity teams • Help ensure a consistent, professional, and well-coordinated customer experience during stressful incidents

🎯 Requirements

• 3+ years of experience working in cybersecurity, information technology, security operations, incident management, technical support, or a related technical environment • Experience supporting, coordinating, or working with cybersecurity incidents highly valued • Strong understanding of cybersecurity fundamentals and common security technologies • Good understanding of enterprise IT environments, including Windows, networking, identity, cloud services, and security technologies • Ability to understand and discuss cybersecurity incidents with technical specialists without personally conducting digital forensic investigations • Strong customer-facing communication skills and experience working with customers during technical or security incidents • Experience coordinating technical activities involving multiple teams and stakeholders • Strong organisational skills and ability to manage multiple activities, priorities, and dependencies during time-sensitive situations • Ability to communicate complex technical information clearly to stakeholders with different levels of technical knowledge • Confidence working with customers during high-pressure or business-critical situations • Native-level Japanese language proficiency, with professional proficiency in English • Desirable: experience working in a Security Operations Centre, Managed Security Service, Incident Response, cybersecurity consulting, technical account management, or similar environment • Desirable: previous experience coordinating cybersecurity incidents, major IT incidents, or other technical response activities • Legal authorization to work in Japan without employer sponsorship

🏖️ Benefits

• Remote-first working model, with remote work as the primary option for most employees • Employee-led diversity and inclusion networks • Annual charity and fundraising initiatives and volunteer days • Global employee sustainability initiatives • Global fitness and trivia competitions • Global wellbeing days • Monthly wellbeing webinars and training • Recruitment and selection process adjustments available to support applicants

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume