Cybersecurity Automation Specialist - Tokyo

Bloomberg is hiring a Cybersecurity Automation Specialist - Tokyo (Japan). Level rates it ; you can apply on Bloomberg.

Level's read on this job

On Level's scale, this cybersecurity role is Little AI ●○○○: aI is not part of the work.
Level classifies it as a mid-level role.
Level lists 336 other open roles at Bloomberg.
The role was posted in the last few days.

AI in this role

What’s the role?
Bloomberg’s Cyber Security Operations Center (CSOC) plays a critical role in safeguarding the company’s digital environment, actively monitoring systems and networks for any signs of suspicious activity. When a confirmed incident occurs, CSOC leads containment and response efforts, formalizing lessons learned and hardening defenses against future attacks.
The Process & Technology Optimization (PTO) team within CSOC is at the forefront of designing, building, and integrating process and technology solutions to enable CSOC functions to thrive and improve. As a PTO staff member, you will play a crucial role in understanding the evolving challenges faced by CSOC teams, driving moonshot goals, and implementing scalable, innovative solutions that shape the future of cyber security operations at Bloomberg.

We will trust you to:

Design & Implement Solutions

Design, build, and test process and technology solutions for prioritized use cases, including automation content, platform configuration, and tooling integrations, from initial design through validation and deployment
Maintain and troubleshoot the automation content, integrations, and configurations you own, adapting them when upstream platforms, vendor products, or data sources change
Support the implementation and configuration of vendor-provided and internally developed products, keeping delivery consistent with the broader technology vision the team has set
Document your work by maintaining SOPs, runbooks, and task-level documentation so others can support and extend what you’ve built
Communicate progress, blockers, and observations to keep the team and requesting stakeholders informed
Collaborate with senior PTO team members on design and technical decisions, drawing on their guidance and experience, and progressively take on greater independent ownership as you grow in the role

Identify Optimizations

Engage with CSOC functions (Event Analysis, Threat Hunting, Incident Response, Detection Engineering, Threat Intelligence, etc.) to understand the problem behind a requested automation, not just the request as stated
Identify systemic issues and look for opportunities to re-engineer the underlying process rather than automate it as-is, documenting potential approaches and escalating for alignment when resolution needs broader prioritization
Flag and escalate issues and gaps wherever you find them, whether in automation requirements, in technologies CSOC depends on, or in controls operated by other teams across the environment
Serve as PTO’s on-the-ground presence in APAC, building strong relationships with the CSOC team and the broader set of stakeholders in the region while representing and delivering on priorities and direction that benefit CSOC as a whole

You’ll need to have:

Technical Expertise

3+ years of experience in cybersecurity operations, systems engineering, or a related technical role (e.g., as an analyst, detection engineer, security engineer, or incident responder)
Demonstrated, hands-on experience designing, building, and maintaining automations on a Low Code/No Code platform such as a SOAR
Practical exposure to technical products common to modern SOCs (e.g., Endpoint Detection & Response (EDR), Threat Intelligence Platforms, Email Analysis, Malware Sandboxing, Network Intrusion Detection, Data Loss Prevention)
Experience with data storage and retrieval systems (e.g., SIEM, databases, data lakes, etc.)
Ability to read and write Python to a moderate skill level, sufficient to build, comprehend, and maintain automation content
Ability to break down a complex process and identify concrete opportunities for improvement
Ability to quickly learn and adapt to new technologies and products, given how frequently the security landscape evolves

Problem Solving & Critical Thinking

Proven ability to dissect technical and operational problems into their component parts
Curious, ambitious mindset with the drive to look past the literal ask and pursue the better underlying solution

Collaboration & Communication

Inquisitive and curious listener
Clear and concise written and verbal communication
Comfortable acquiring context from others and sharing it effectively across the team

We’d love to see:

Python or scripting skills sufficient to build custom integrations or work directly against vendor APIs when a low-code platform’s built-in actions fall short
Hands-on experience administering or engineering one or more SOC product categories, such as EDR, Threat Intelligence Platforms, Email Analysis, Malware Sandboxing, Network Intrusion Detection, or Data Loss Prevention
Experience applying version control or CI/CD practices to automation content, treating it with the same rigor as software
Familiarity applying GenAI tools and capabilities to CSOC use cases, such as accelerating triage, summarization, or investigation workflows

If this sounds like you:
Apply if you think we're a good match. We'll get in touch to let you know what the next steps are, but in the meantime feel free to have a look at this: www.bloomberg.com/professional
Why Bloomberg? We’re individuals with diverse backgrounds, talents, and experiences who take on big challenges and create even bigger impact through our work. We’re interested in what makes you you, and how we can create opportunities for you to channel your unique, personal energy and grow to your fullest potential.
Learn more about our office and benefits: Tokyo | www.bloomberg.com/tokyo Discover what makes Bloomberg unique - watch our podcast series for an inside look at our culture, values, and the people behind our success.

How we rate this

Cybersecurity Automation Specialist - Tokyo at Bloomberg rates 29 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.