Job Title - Security Response

Job Title:
Incident Response - Responder
Job ID:
21465BR
Location:
Akasaka, Tokyo
Full/Part Time:
Fulltime
---------------------------------------------------------------------------------------------------------------------------------------------
Summary
“Symantec enables people, businesses and countries to protect and manage their digital
information so they can focus their time and energy on achieving their aspirations. Each
employee plays a role in delivering best we can be results for Employees, Customers, and
Shareholders while building the foundation for a stronger future. Come join the Symantec 4.0
revolution.”
Symantec is the global leader in information security. The Cyber Readiness & Response
organization is a critical component of Symantec’s Managed Security Services and Intelligence
offerings that helps clients predict, prepare, detect, and respond to modern threats by
increasingly sophisticated attack actors.
As part of this organization, the Incident Response Team is chartered to work collaboratively with
customer and partner teams to provide rapid proactive and reactive threat response,
investigations, and breach response for Symantec’s customers. As Investigator, you will work
collaboratively with Symantec and partner teams to find and eradicate threats to customer
environments. You will gain exposure to some of the largest and most complex environments
around, as well as some of the most highly targeted, advanced attacks out there.
Responsibilities

Be a primary first responder for incidents for Symantec customers

Collect and process the evidence needed to conduct highly-confidential investigations for
Symantec customers

Contribute to client reports on relevant findings

Participate in the improvement and development of methodologies, process/procedure
manuals and documentation
Qualifications
Required Technical Skills

Expert understanding of network protocols, TCP/IP fundamentals

Expert understanding of operating systems (Windows, Linux or OS X,
iOS/Android)

Expert understanding of intrusion detection systems (e.g. Snort, Suricata) and
tools (e.g. tcpdump, Wireshark) OR expert in one or more of the following:

Knowledge of Malware Triage and Reverse Engineering

Knowledge of network based services and client/server applications

Knowledge of enterprise systems and infrastructure

Expert understanding of network architecture and security infrastructure
placement

Familiarity with security tools such as Anti-Virus, Anti-Spam/Email security
systems and Data Loss Prevention Tools; Symantec tools a plus.

Expert understanding of computer/network forensics tools (e.g. Encase,
NetWitness)

Expert understanding of legal/regulatory aspects of Incident Response
processes and methodologies

Background performing computer security incident response and digital
forensics
Other Required Skills

Ability to successfully interface with Symantec partners and clients at both
technical and executive levels

Ability to document and explain technical details clearly and concisely

Solid attention to detail

Strong written and communication skills

Ability to present a professional appearance and demeanor during a crisis and in
high stress situations
Education/Experience

4 year college degree in computer science or related field is desired

Industry certification in multiple operating systems and/or network technologies

Minimum 7 years experience in an information security discipline

SANS GIAC Certified Incident Handler (GCIH) or GIAC Certified Forensic
Examiner (GCFE) certification and certification on one or more
computer/network forensics solutions is desired
Additional Desired Skills

Government security clearances highly desired

Experience in working with global systems integrators and partner ecosystems

Experience with programming/scripting languages

Background in operational information security disciplines (e.g. incident
response, security infrastructure management or monitoring services)

Experience in config/mgmt of feeds into event aggregation and correlation
systems (e.g., Splunk, ArcSight)

Awareness of or experience with competitor Incident Response services or
technology
-------------------------------------------------------------------------------------------------------------------------------------
給与
年俸制(*経験・能力等を考慮の上、当社規定により優遇します)
月次基本給
:年間基本給の 1/12
給与改定
:
年1回
諸手当
通勤手当
:公共交通機関の 1 ヶ月の定期代を支給
勤務時間
フレックスタイム制(コアタイム 10:00~16:00)
*一日の所定労働時間:7 時間 30 分
休日・休暇
完全週休 2 日制 ( 土・日 )、祝日、有給休暇、慶弔休暇、夏期休暇、年末年始休暇、特別休暇 他
社会保険
健康保険 ( 健康保険組合 )、厚生年金保険、雇用保険、労災保険
福利厚生
自社株購入制度、財形貯蓄制度、退職金制度、保養所 ( 健康保険組合 )、団体生命保険、所得補償保険、
慶弔見舞金制度、スポーツクラブ補助金制度 他
-------------------------------------------------------------------------------------------------------------------------------------
応募方法
採用に関わる個人情報の取扱いについてを必ずお読みいただいた上でご応募ください。
日本語および英語の「履歴書と職務経歴書 ( 様式自由 )」 を弊社、採用専用のメールアドレス
( [email protected] ) に送信ください。個人情報保護のためファイルには必ずパスワードをかけ
た上で送信願います。また、パスワードは、別のメールにて送信ください。
尚、選考の結果は、次のステップへ進んでいただく方へのみご連絡しております。書類選考期間は通常 1
~2 週間となっております。何卒ご了承ください。