Threat Detection Analyst (Japanese Speaking desirable)

Fastly, Inc.; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Remote work option

Travel opportunities

Job summary

Fastly, Inc. is seeking a Threat Detection Analyst to join our dedicated Customer Security Operations Centre.

In this frontline role you will monitor traffic, detect sophisticated anomalies, and deploy real-time mitigations against DDoS, bot, and Web Application attacks for our global enterprise customers. You will act as a strategic partner for MSS clients, translating telemetry into actionable insights, leading incident response, and tuning security policies.

Qualifications

• OWASP Top 10 understanding and advanced attack vectors (Credential Stuffing, API Abuse, Layer 7 DDoS)
• Interpret raw payloads to distinguish malicious from legitimate traffic
• Strong knowledge of HTTP/S, TCP/IP, DNS, TLS; analyze handshakes and headers
• Ability to translate technical findings into concise, professional communications

Responsibilities

• Lead identification and mitigation of high-impact security events in real-time
• Tune and refine MSS security policies to optimize detection and security posture
• Conduct data-driven investigations using log analysis to uncover threats
• Author After Action Reports and security summaries for stakeholders
• Act as SME during active incidents with clear real-time guidance

Skills

Web Security Expertise

Protocol Proficiency

Analytical Rigor

Communication Excellence

Job description

the company helps people stay better connected with the things they love. the company’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers’ applications as close to their end-users as possible — at the edge of the Internet. The platform is designed to take advantage of the modern internet, to be programmable, and to support agile software development. the company’s customers include many of the world’s most prominent companies, including GitHub, Yelp, Paramount, and JetBlue.

We're building a more trustworthy Internet. Come join us.

Threat Detection Analyst - (Japanese speaking desirable)

the company is seeking a Threat Detection Analyst to join our dedicated Customer Security Operations Centre. In this role, you will be a frontline defender for the company’s global enterprise customers. You will leverage our edge cloud platform and an array of security products in monitoring traffic, detect sophisticated anomalies, and deploy real-time mitigations against DDoS, Bot, and Web Application attacks.

This is a high-impact role where you act as a strategic partner for our Managed Security Service (MSS) clients, providing the expert visibility and rapid response necessary to address internet-scale threats.

What you’ll Do :

• Active Incident Response: Lead the identification and mitigation of high-impact security events. You will analyze sophisticated traffic patterns and implement precise countermeasures, including rate limiting and custom WAF & Security rules to neutralize threats in real-time.

• Managed Security Delivery: Serve as a primary security consultant for MSS Customers. This involves continuous tuning and refining of security policies to optimize detection accuracy and maintaining a hardened security posture tailored to each client's unique environment.

• Advanced Threat Hunting: Conduct data-driven investigations using log analysis to uncover potential threats and hardenings opportunities

• Security Intelligence & Reporting: Author comprehensive After Action Reports (AARs) and monthly security summaries. You will translate complex telemetry and attack data into high-level actionable insights for customer stakeholders.

• Strategic Communication: Act as the Subject Matter Expert (SME) during active security incidents. You will provide clear, calm, and professional guidance via real-time communication channels, ensuring customers are informed and confident in our defensive strategy.

What we are looking for :

• Web Security Expertise: Comprehensive understanding of the OWASP Top 10 and advanced attack vectors (e.g., Credential Stuffing, API Abuse, and Layer 7 DDoS). You can interpret raw payloads to distinguish between malicious intent and legitimate traffic.

• Protocol Proficiency: Deep technical knowledge of the internet stack, specifically HTTP/S, TCP/IP, DNS, and TLS. You should be comfortable analyzing handshake processes, header structures, and status codes.

• Analytical Rigor: A methodical approach to digital forensics and incident response. You possess the ability to correlate disparate data points within JSON or CSV logs to reconstruct an attack narrative.

• Communication Excellence: The ability to distill complex technical findings into concise, professional, and empathetic communications for both technical and non-technical audiences.

We’ll be super impressed if you have experience in any of these:

• Proficiency in Python or Bash for log parsing and workflow automation.

• Experience with Infrastructure as Code/Security as Code(SaC) (Terraform) or edge-based configurations.

• Industry-standard certifications such as CompTIA CySA+, GCIH, or Security+.

Work Hours:

• This position will require you to be available during core business hours.

• Tuesday to Saturday : 10 am to 6 PM AEST and 11 am to 7 pm AEDT

Work Location(s) & Travel Requirements

This position is a remote position based out of (locality), with the possibility of becoming a hybrid position as the company expands its presence in the region.

This position will require travel to the US and Internationally, as required by your role or requested by your manager.

Benefits:

We care about you. the company works hard to create a positive environment for our employees, and we think your life outside of work is important too. We support our teams with great benefits that start on the first day of your employment with the company. Curious about our offerings?

We offer a comprehensive benefits package designed to meet your needs. Our offerings may vary depending on the country where you work and are subject to change.

Why the company?

-

We have a huge impact.

the company is a small company with a big reach. Not only doour customershave a tremendous user base, but we also support a growing number ofopen source projects and initiatives.Outside of code, employees are encouraged to share causes close to their heart with others so we can help lend a supportive hand.

We value diversity.

Growing and maintaining our inclusive and diverse team matters to us. We are committed to being a company where our employees feel comfortable bringing their authentic selves to work and have the ability to be successful -- every day.

We are passionate.

the company is chock full of passionate people and we’re not ‘one size fits all’. the company employs authors, pilots, skiers, parents (of humans and animals), makeup geeks, coffee connoisseurs, and more. We love employees for who they are and what they are passionate about.

We’re always looking for hu