HQSEC_R035 Sr. Detection & Response Engineer

Responsibilities

Sony Group Corporation, headquartered in Shinagawa, Tokyo, is the global center for Sony Group. Its main businesses include Sony Electronics, Sony Mobile Communications, Sony Interactive Entertainment, Sony Pictures, Sony Music, and Sony/ATV Music Publishing. With 900 million Sony devices worldwide and a vast array of movies, TV shows, music, and the PlayStation and Sony Entertainment Networks, Sony delivers more entertainment experiences than anyone else.

Position Summary

Sony Group Corporation is seeking a Detection and Response Engineer responsible for detection engineering, security monitoring, and incident response activities. This role also covers digital forensics, malware and threat intelligence analysis, as well as improving cyber defense workflows through orchestration and automation.

The position operates as part of a geographically distributed Incident Response Team within the Global Security Incident Response Team (GSIRT), working independently while collaborating closely with global and operating company security teams. This role reports to the Senior Manager, Cyber Defense Japan.

Job Responsibilities

• Perform detection engineering, security monitoring, and incident response activities
• Perform digital forensics, malware analysis, and threat intelligence analysis as needed
• Identify deficiencies in security controls that contribute to incidents or elevate risk and collaborate with stakeholders to mitigate them
• Improve the Cyber Defense Team workflow using orchestration and automation
• Combine a strong understanding of the threat landscape with business requirements to build detection and response capabilities that adapt to business needs
• Flexible work hours and on-call duties during non-standard business hours
• Other duties related to cyber defense as assigned

Requirements

Required qualifications

• Bachelor’s degree in computer science, engineering, information technology or equivalent experience
• 6+ years in information security, with experience in security operations

Preferred qualifications

• Hands-on experience with network and endpoint forensics, and log analytics
• Proficiency responding to security incidents on Windows, ,macOS, and Linux operating systems
• Proficiency responding to security incidents on cloud IaaS and SaaS platforms (e.g. AWS, M365)
• Experience with SIEM, endpoint, and network technologies for security operations
• Proficiency in scripting languages such as Python, PowerShell, and Bash for automation is highly preferred
• Ability to communicate clearly, manage multiple priorities, and work independently as part of a distributed team
• All candidates must be authorized to work in Japan
• Business-level proficiency in English is required
• Business-level proficiency in Japanese is required
• Prior experience working in a global team or international environment is a plus.

Bonus system