Threat Detection Analyst (Japanese Speaking desirable)

## About the role Fastly is seeking a Threat Detection Analyst to join its dedicated Customer Security Operations Centre. The role acts as a frontline defender for Fastly's global enterprise customers, using Fastly's edge cloud platform and a range of security products to monitor traffic, detect sophisticated anomalies, and deploy real-time mitigations against DDoS, Bot, and Web Application attacks. This is a strategic partner role for Managed Security Service (MSS) clients, providing expert visibility and rapid response to internet-scale threats. ## What you'll do - **Active Incident Response**: lead the identification and mitigation of high-impact security events, analyzing sophisticated traffic patterns and implementing countermeasures including rate limiting and custom WAF & security rules. - **Managed Security Delivery**: serve as a primary security consultant for MSS customers, continuously tuning and refining security policies. - **Advanced Threat Hunting**: conduct data-driven investigations using log analysis to uncover potential threats and hardening opportunities. - **Security Intelligence & Reporting**: author After Action Reports (AARs) and monthly security summaries, translating telemetry and attack data into actionable insights for customers. - **Strategic Communication**: act as the Subject Matter Expert (SME) during active security incidents, providing clear, calm, professional guidance via real-time communication channels. ## What they're looking for - **Web Security Expertise**: comprehensive understanding of the OWASP Top 10 and advanced attack vectors (Credential Stuffing, API Abuse, Layer 7 DDoS), able to interpret raw payloads to distinguish malicious intent from legitimate traffic. - **Protocol Proficiency**: deep technical knowledge of HTTP/S, TCP/IP, DNS, and TLS, comfortable analyzing handshake processes, header structures, and status codes. - **Analytical Rigor**: a methodical approach to digital forensics and incident response, able to correlate disparate data points within JSON or CSV logs to reconstruct an attack narrative. - **Communication Excellence**: the ability to distill complex technical findings into concise, professional, and empathetic communications for technical and non-technical audiences. ### Nice to have - Proficiency in Python or Bash for log parsing and workflow automation. - Experience with Infrastructure as Code / Security as Code (Terraform) or edge-based configurations. - Industry-standard certifications such as CompTIA CySA+, GCIH, or Security+. ## Work hours Core business hours required: Tuesday to Saturday, 10 am to 6 pm AEST / 11 am to 7 pm AEDT. ## Location & travel This is a remote position, with the possibility of becoming hybrid as Fastly expands its presence in the region. Travel to the US and internationally may be required. ## How to apply Applications go through Fastly's official careers site (www.fastly.com/about/careers). Fastly states it will never request sensitive information such as a Social Security number or bank details during the application process.