CSIRTエンジニア

Job Description

PayPay, a rapidly growing fintech company with over 69 million users, is seeking a CSIRT Engineer to join its team. The company boasts a diverse workforce from over 50 countries and is dedicated to revolutionizing cashless payments in Japan.

The CSIRT Engineer will be part of a team responsible for investigating and overseeing security incidents, such as information leaks and phishing attacks. This role involves collaborating with various internal and external stakeholders to enhance PayPay's cyber resilience and maintain a secure environment.

Responsibilities include:

• Analyzing security alerts (Tier2).
• Conducting threat hunting through integrated log analysis.
• Designing and improving rules for security systems and tools.
• Collecting, disseminating, and promoting responses to vulnerability information.
• Exchanging information and collaborating with internal and external organizations.
• Strengthening cyber resilience using threat intelligence.
• Performing forensic investigations and malware analysis.
• Investigating and responding to phishing sites.

Requirements:

• Minimum of 2 years of practical experience in cybersecurity.
• Experience in coordinating with multiple departments or equivalent communication skills.

Preferred Skills:

• English communication skills (daily conversation level, with emphasis on reading and writing).
• Understanding and experience in building/operating cloud services (AWS, GCP, etc.).
• Experience in financial institutions or payment companies.
• Knowledge of NIST Cybersecurity Framework.
• Knowledge of MITRE ATT&CK.
• Experience in forensic investigation and malware analysis.

PayPay offers:

• Opportunity to make significant contributions in a short period.
• Experience in designing and modeling attack predictions using threat intelligence and analysis.
• Opportunities for collaboration, skill development, and job changes with the SOC team/red team.