Threat Detection Analyst (Japanese Speaking desirable)

The role

You will act as a frontline defender for global enterprise customers by monitoring traffic and detecting anomalies. You will deploy real-time mitigations against DDoS, Bot, and Web Application attacks using an edge cloud platform.

What you will do

• Lead the identification and mitigation of high-impact security events
• Analyze sophisticated traffic patterns and implement countermeasures
• Serve as a primary security consultant for MSS Customers
• Tune and refine security policies to optimize detection accuracy
• Conduct data-driven investigations using log analysis
• Author After Action Reports and monthly security summaries
• Translate complex telemetry and attack data into actionable insights
• Act as the Subject Matter Expert during active security incidents

Required qualifications

• Comprehensive understanding of the OWASP Top 10 and advanced attack vectors
• Ability to interpret raw payloads to distinguish between malicious intent and legitimate traffic
• Deep technical knowledge of the internet stack, specifically HTTP/S, TCP/IP, DNS, and TLS
• Ability to analyze handshake processes, header structures, and status codes
• Methodical approach to digital forensics and incident response
• Ability to correlate disparate data points within JSON or CSV logs
• Ability to distill complex technical findings into concise, professional, and empathetic communications

Nice to have

• Proficiency in Python or Bash for log parsing and workflow automation
• Experience with Infrastructure as Code/Security as Code(SaC) (Terraform) or edge-based configurations
• Industry-standard certifications such as CompTIA CySA+, GCIH, or Security+
• Japanese speaking desirable

Benefits

• Comprehensive benefits package

Before you apply

• Use of AI technologies is strictly prohibited during the interview process unless explicitly authorized by the company in advance

About the company

Fastly's edge cloud platform enables customers to create digital experiences by processing, serving, and securing applications at the edge of the Internet.