Incident Response Engineer

• Act as a primary coordination point between customers and DFIR consultants during active cybersecurity incidents.

• Coordinate and host incident scoping calls with customers to understand the incident, establish requirements, and support the engagement of the appropriate DFIR resources.

• Coordinate incident response activities from initial engagement through investigation, remediation, and closure.

• Work with DFIR consultants to understand investigation progress, priorities, dependencies, and customer requirements.

• Maintain clear communication with customers throughout an incident, including investigation status, next steps, outstanding actions, and information requirements.

• Coordinate meetings, incident updates, deliverables, and follow-up activities between customers and internal technical teams.

• Help customers gather and provide the information, logs, system access, and technical context required by DFIR consultants.

• Track actions, decisions, dependencies, and outstanding items throughout the incident lifecycle.

• Identify potential delays, communication gaps, or blockers and work with the appropriate stakeholders to resolve or escalate them.

• Translate technical investigation updates into clear, customer-appropriate language without changing the technical findings or conclusions of the investigation.

• Translate incident reports, investigation updates, and other customer communications from English into Japanese when required, ensuring technical meaning and context are accurately maintained.

• Support the preparation and delivery of customer updates, investigation reports, and incident debriefing sessions.

• Coordinate with other cybersecurity teams, including Threat Intelligence, Technical Testing, Managed Detection and Response, and other relevant specialists when required.

• Help ensure customers receive a consistent, professional, and well-coordinated experience during what can be a highly stressful situation.

• 3+ years of experience working in cybersecurity, information technology, security operations, incident management, technical support, or a related technical environment.

• Experience supporting, coordinating, or working with cybersecurity incidents will be highly valued.

• Strong understanding of cybersecurity fundamentals and common security technologies.

• Good understanding of enterprise IT environments, including Windows, networking, identity, cloud services, and security technologies.

• Ability to understand and discuss cybersecurity incidents with technical specialists without needing to personally conduct digital forensic investigations.

• Strong customer-facing communication skills and experience working with customers during technical or security incidents.

• Experience coordinating technical activities involving multiple teams and stakeholders.

• Strong organisational skills and the ability to manage multiple activities, priorities, and dependencies during time-sensitive situations.

• Ability to communicate complex technical information clearly to stakeholders with different levels of technical knowledge.

• Confidence working with customers during high-pressure or business-critical situations.

• Native-level Japanese language proficiency, with professional proficiency in English.

Desirable

• Experience working in a Security Operations Centre, Managed Security Service, Incident Response, cybersecurity consulting, technical account management, or similar environment.

• Previous experience coordinating cybersecurity incidents, major IT incidents, or other technical response activities.