Cybersecurity Analyst

About the position

We're looking to add a passionate Cybersecurity Detection and Response Analyst to our Hong Kong office to help protect Jane Street’s employees, data and infrastructure from the wilds of the internet. 

This is not (just) an eyes-on-glass, click ops role—our cybersecurity analysts are also responsible for developing the tools and systems we use to guard the firm. Think about this role as some combination of incident responder, detection engineer, security engineer, SOC automation engineer, threat hunter, threat modeler and security awareness engineer. Our SOC team is involved in engineering (e.g., we built our own SOAR, email content scanning system, the entire alerting stack and much more) and we handle the incident response and remediation when a threat is found.

Our analysts research and prioritise what threats need to be monitored, hunt for them in our data, write code to detect them and constantly tune the detection to prioritise quality over quantity. We maintain full control over the alerts we respond to, and own all stages of the detection and response lifecycle.

Our Cybersecurity team is a skilled group of programmers and security experts who are dedicated to keeping the firm safe. We consider ourselves to be tapped into developments in the broader cybersecurity space, and can tell the difference between the latest cool hack by security researchers and what actually matters in our day-to-day. In this role, you’ll carefully consider the context of our decisions as we think about the tradeoffs we’re making in our approach to resolving cybersecurity issues. We’ll expect you to apply a methodical approach to performing unstructured investigations to locate and repair the source of a security issue.

You will also act as an ambassador of best practices to the rest of the firm. Team members understand and practice good personal cybersecurity hygiene, and are able to talk to others about it. A key component of doing well in this position is bringing everyone else along with you on the cybersecurity journey, and you should be excited to learn from your colleagues and pass that learning on to new analysts.

About you

• Have (or will have) a degree in computer science, engineering, information systems or a related field
• An avid follower of cybersecurity news
• A strong programmer who can demonstrate high potential and an aptitude for learning
• Comfortable and interested in managing your code and configs in version control, and with using your editor (we don't care which though)
• Familiar with threat modelling; able to understand how cybersecurity fits into the firm’s broader goals and clearly communicate security tradeoffs to our colleagues
• Able to explain the cybersecurity decisions you’ve made in your own life, and how you’ve approached thinking about those decisions
• Able to adapt to changing scenarios and make challenging decisions under pressure
• Humble about what you know and don’t know; not afraid to ask questions and admit mistakes
• An intellectually curious problem solver with a positive, collaborative attitude
• Fluent in English

If you're a recruiting agency and want to partner with us, please reach out to  [protected-email-address] .