Cybersecurity Analyst

Jane Street; Hong Kong; On-site; HKD 480,000 - 900,000; Full time

Job summary

Jane Street in Hong Kong seeks a Cybersecurity Detection and Response Analyst to protect employees, data and infrastructure from the internet. The role blends incident response, detection engineering, and threat hunting with building and tuning our security tools.

You'll research threats, write detection code, and own alerts across the lifecycle while evangelizing best practices and helping colleagues improve their own security posture.

Qualifications

• Degree in computer science, engineering, information systems or related field.
• Fluent in English.
• Strong programming ability and learning aptitude.
• Familiar with threat modelling and security tradeoffs.
• Experience with version control and editors.

Responsibilities

• Research and prioritise threats to monitor and hunt for them in data.
• Write code to detect threats and tune detections for quality over quantity.
• Own the detection and response lifecycle and respond to alerts.
• Develop and improve security tools and automation used by the SOC.
• Promote cybersecurity best practices and educate colleagues across the firm.

Skills

Programming

English fluency

Threat modelling

Version control

Communication

Problem solving

Curiosity

Education

CS/Engineering/IS degree

Job description

About the position

We're looking to add a passionate Cybersecurity Detection and Response Analyst to our Hong Kong office to help protect Jane Street's employees, data and infrastructure from the wilds of the internet.

This is not (just) an eyes-on-glass, click ops role-our cybersecurity analysts are also responsible for developing the tools and systems we use to guard the firm. Think about this role as some combination of incident responder, detection engineer, security engineer, SOC automation engineer, threat hunter, threat modeler and security awareness engineer. Our SOC team is involved in engineering (e.g., we built our own SOAR, email content scanning system, the entire alerting stack and much more) and we handle the incident response and remediation when a threat is found.

Our analysts research and prioritise what threats need to be monitored, hunt for them in our data, write code to detect them and constantly tune the detection to prioritise quality over quantity. We maintain full control over the alerts we respond to, and own all stages of the detection and response lifecycle.

Our Cybersecurity team is a skilled group of programmers and security experts who are dedicated to keeping the firm safe. We consider ourselves to be tapped into developments in the broader cybersecurity space, and can tell the difference between the latest cool hack by security researchers and what actually matters in our day-to-day. In this role, you'll carefully consider the context of our decisions as we think about the tradeoffs we're making in our approach to resolving cybersecurity issues. We'll expect you to apply a methodical approach to performing unstructured investigations to locate and repair the source of a security issue.

You will also act as an ambassador of best practices to the rest of the firm. Team members understand and practice good personal cybersecurity hygiene, and are able to talk to others about it. A key component of doing well in this position is bringing everyone else along with you on the cybersecurity journey, and you should be excited to learn from your colleagues and pass that learning on to new analysts.

About you

• Have (or will have) a degree in computer science, engineering, information systems or a related field


• An avid follower of cybersecurity news


• A strong programmer who can demonstrate high potential and an aptitude for learning


• Comfortable and interested in managing your code and configs in version control, and with using your editor (we don't care which though)


• Familiar with threat modelling; able to understand how cybersecurity fits into the firm's broader goals and clearly communicate security tradeoffs to our colleagues


• Able to explain the cybersecurity decisions you've made in your own life, and how you've approached thinking about those decisions


• Able to adapt to changing scenarios and make challenging decisions under pressure


• Humble about what you know and don't know; not afraid to ask questions and admit mistakes


• An intellectually curious problem solver with a positive, collaborative attitude


• Fluent in English