Cybersecurity Automation Specialist - Tokyo

Job description

Bloomberg’s Cyber Security Operations Center (CSOC) plays a critical role in safeguarding the company’s digital environment, actively monitoring systems and networks for any signs of suspicious activity. When a confirmed incident occurs, CSOC leads containment and response efforts, formalizing lessons learned and hardening defenses against future attacks. The Process & Technology Optimization (PTO) team within CSOC is at the forefront of designing, building, and integrating process and technology solutions to enable CSOC functions to thrive and improve. As a PTO staff member, you will play a crucial role in understanding the evolving challenges faced by CSOC teams, driving moonshot goals, and implementing scalable, innovative solutions that shape the future of cyber security operations at Bloomberg. We will trust you to: Design & Implement Solutions Design, build, and test process and technology solutions for prioritized use cases, including automation content, platform configuration, and tooling integrations, from initial design through validation and deployment Maintain and troubleshoot the automation content, integrations, and configurations you own, adapting them when upstream platforms, vendor products, or data sources change Support the implementation and configuration of vendor-provided and internally developed products, keeping delivery consistent with the broader technology vision the team has set Document your work by maintaining SOPs, runbooks, and task-level documentation so others can support and extend what you’ve built Communicate progress, blockers, and observations to keep the team and requesting stakeholders informed Collaborate with senior PTO team members on design and technical decisions, drawing on their guidance and experience, and progressively take on greater independent ownership as you grow in the role Identify Optimizations Engage with CSOC functions (Event Analysis, Threat Hunting, Incident Response, Detection Engineering, Threat Intelligence, etc.) to understand the problem behind a requested automation, not just the request as stated Identify systemic issues and look for opportunities to re-engineer the underlying process rather than automate it as-is, documenting potential approaches and escalating for alignment when resolution needs broader prioritization Flag and escalate issues and gaps wherever you find them, whether in automation requirements, in technologies CSOC depends on, or in controls operated by other teams across the environment Serve as PTO’s on-the-ground presence in APAC, building strong relationships with the CSOC team and the broader set of stakeholders in the region while representing and delivering on priorities and direction that benefit CSOC as a whole You’ll need to have: Technical Expertise 3+ years of experience in cybersecurity operations, systems engineering, or a related technical role (e.g., as an analyst, detection engineer, security engineer, or incident responder) Demonstrated, hands-on experience designing, building, and maintaining automations on a Low Code/No Code platform such as a SOAR Practical exposure to technical products common to modern SOCs (e.g., Endpoint Detection & Response (EDR), Threat Intelligence Platforms, Email Analysis, Malware Sandboxing, Network Intrusion Detection, Data Loss Prevention) Experience with data storage and retrieval systems (e.g., SIEM, databases, data lakes, etc.) Ability to read and write Python to a moderate skill level, sufficient to build, comprehend, and maintain automation content Ability to break down a complex process and identify concrete opportunities for improvement Ability to quickly learn and adapt to new technologies and products, given how frequently the security landscape evolves Problem Solving & Critical Thinking Proven ability to dissect technical and operational problems into their component parts Curious, ambitious mindset with the drive to look past the literal ask and pursue the better underlying solution Collaboration & Communication Inquisitive and curious listener Clear and concise written and verbal communication Comfortable acquiring context from others and sharing it effectively across the team We’d love to see: Python or scripting skills sufficient to build custom integrations or work directly against vendor APIs when a low-code platform’s built-in actions fall short Hands-on experience administering or engineering one or more SOC product categories, such as EDR, Threat Intelligence Platforms, Email Analysis, Malware Sandboxing, Network Intrusion Detection, or Data Loss Prevention Experience applying version control or CI/CD practices to automation content, treating it with the same rigor as software Familiarity applying GenAI tools and capabilities to CSOC use cases, such as accelerating triage, summarization, or investigation workflows If this sounds like you: Apply if you think we're a good match. We'll get in touch to let you know what the next steps are, but in the meantime feel free to have a look at this: www.bloomberg.com/professional Why Bloomberg? We’re individuals with diverse backgrounds, talents, and experiences who take on big challenges and create even bigger impact through our work. We’re interested in what makes you you, and how we can create opportunities for you to channel your unique, personal energy and grow to your fullest potential. Learn more about our office and benefits: Tokyo | www.bloomberg.com/tokyo Discover what makes Bloomberg unique - watch our podcast series for an inside look at our culture, values, and the people behind our success. Apply Now Back to Job Search Apply Now Save this Job