About the Role
Rakuten Mobile is seeking a senior Threat Hunter to join its cyber defense organization. This role is crucial for proactively identifying and mitigating advanced threats, ensuring the resilience and security of its cutting-edge mobile network.
Responsibilities
- Develop and execute hypothesis-driven threat hunting campaigns, analyzing log, endpoint, and network data to uncover malicious activity.
- Research and track adversary Tactics, Techniques, and Procedures (TTPs) using frameworks like MITRE ATT&CK to build and test threat hypotheses.
- Translate hunting outcomes into actionable security enhancements, creating detection logic, data requirements, and validation steps.
- Collaborate with the Detection Engineering team to enhance detection rules and playbooks.
- Partner with Cyber Threat Intelligence, Incident Response, and SOC teams to operationalize threat insights and provide incident support.
- Perform in-depth technical analysis of attacker tradecraft, including lateral movement, persistence, and exfiltration techniques.
- Utilize advanced security tools such as SIEM, UEBA, and forensic analysis platforms for threat hunting.
- Automate analysis and detection processes using scripting languages (e.g., Python, PowerShell).
- Stay current with the evolving threat landscape and emerging adversary techniques.
Requirements
- Minimum of 10-12 years of experience in cybersecurity, with strong expertise in Cyber Threat Hunting.
- Demonstrable experience in Incident Response and Forensics.
- Exposure to Security Operations, Threat Intelligence, and Malware Analysis.
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent practical experience.
- In-depth knowledge of the MITRE ATT&CK framework.
- Strong understanding of enterprise network architecture, including advanced networking concepts and protocols.
- Expertise in telecommunication protocols and infrastructure relevant to mobile environments (e.g., 4G/5G, SS7, Diameter, GTP).
- Deep understanding of cloud-native environments, including Kubernetes and container orchestration.
- Proven experience hunting for threats and anomalies within cloud infrastructures.
- Demonstrated experience with major cloud platforms (e.g., AWS, Azure, GCP) and their native security services.
- Experience and strong interest in leveraging advanced AI capabilities, including Machine Learning (ML) models and Large Language Models (LLMs).
- Exceptional analytical expertise, critical thinking, and problem-solving skills.
- Knowledge of secure architecture and design principles.
- Excellent written and verbal communication skills.
- Demonstrated strong documentation discipline.
- Ability to work effectively in a fast-paced, operational environment.
- Flexibility for non-standard work hours in response to cybersecurity incidents.
- A strong aptitude for continuous learning and adapting quickly to new technologies and threat landscapes.
- Understanding of regulatory compliance and data privacy requirements.
Skills
- Cyber Threat Hunting
- Incident Response
- Forensics
- Security Operations
- Threat Intelligence
- Malware Analysis
- MITRE ATT&CK framework
- Enterprise network architecture
- Advanced networking concepts
- Networking protocols
- Deep packet inspection
- Network traffic analysis
- Telecommunication protocols
- Mobile network infrastructure (4G/5G, SS7, Diameter, GTP)
- Cloud-native environments (Kubernetes, container orchestration)
- Cloud platforms (AWS, Azure, GCP)
- Cloud security services
- AI capabilities (ML, LLMs)
- Scripting languages (Python, PowerShell)
- SIEM
- UEBA
- Forensic analysis platforms
Location
- Remote
Work Type
- Full-time
Experience Level
- Senior
- 10-12 years of experience in cybersecurity
Education Level
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent practical experience.
About the Company
- Rakuten Mobile, Inc. is an entity established for the launch of its mobile carrier business as an MNO (Mobile Network Operator).
- We aim to provide the most competitive and convenient service to meet our customer needs and demands via the innovative use of technology.
- Defining future world-standard innovations in the MNO industry, we continually challenge ourselves and capabilities.
- The Security Engineering & Operations Department at Rakuten Mobile is at the forefront of protecting our innovative mobile network infrastructure and services.
- We are building a robust cyber defense organization to safeguard our customers and operations from evolving cyber threats.
- We are looking for talented individuals who are interested in working with us to create and deliver world-class security solutions.
