Bloomberg

Global financial data, news, analytics provider

Cybersecurity Automation Specialist

Security Operations & Incident ResponseConfirmed live in the last 24 hours

Full-timeTokyo, JapanNo salary listedIn-person

About the Job

Requirements

At least 3 years of experience in cybersecurity operations, systems engineering, or a related technical role, such as analyst, detection engineer, security engineer, or incident responder.
Hands-on experience designing, building, and maintaining automations on a low-code/no-code platform such as a Security Orchestration, Automation, and Response (SOAR) platform.
Practical exposure to technical products common to modern security operations centers, such as Endpoint Detection and Response (EDR), Threat Intelligence Platforms, Email Analysis, Malware Sandboxing, Network Intrusion Detection, and Data Loss Prevention.
Experience with data storage and retrieval systems, such as Security Information and Event Management (SIEM) systems, databases, or data lakes.
Ability to read and write Python at a moderate skill level, sufficient to build, comprehend, and maintain automation content.
Ability to break down complex processes and identify concrete opportunities for improvement.
Ability to learn and adapt to new technologies and products.
Ability to dissect technical and operational problems into their component parts.
Ability to identify better underlying solutions beyond the literal request.
Ability to listen inquisitively, communicate clearly and concisely in writing and verbally, acquire context from others, and share it effectively across the team.

Responsibilities

Design, build, and test process and technology solutions for prioritized use cases, including automation content, platform configuration, and tooling integrations, from initial design through validation and deployment.
Maintain and troubleshoot owned automation content, integrations, and configurations, adapting them when upstream platforms, vendor products, or data sources change.
Support implementation and configuration of vendor-provided and internally developed products, keeping delivery consistent with the broader technology vision set by the team.
Maintain standard operating procedures, runbooks, and task-level documentation so others can support and extend the work.
Communicate progress, blockers, and observations to the team and requesting stakeholders.
Collaborate with senior Process & Technology Optimization team members on design and technical decisions, and progressively take on greater independent ownership.
Engage with Cyber Security Operations Center functions, including Event Analysis, Threat Hunting, Incident Response, Detection Engineering, and Threat Intelligence, to understand the underlying problem behind automation requests.
Identify systemic issues and opportunities to re-engineer processes rather than automate them as-is; document potential approaches and escalate when resolution requires broader prioritization.
Flag and escalate issues and gaps in automation requirements, technologies used by the Cyber Security Operations Center, or controls operated by other teams.
Serve as the Process & Technology Optimization team's on-the-ground presence in APAC, building relationships with regional Cyber Security Operations Center teams and stakeholders while representing and delivering priorities that benefit the broader organization.

Desired Qualifications

Python or scripting skills sufficient to build custom integrations or work directly against vendor APIs when built-in low-code platform actions fall short.
Hands-on experience administering or engineering one or more security operations product categories, such as Endpoint Detection and Response, Threat Intelligence Platforms, Email Analysis, Malware Sandboxing, Network Intrusion Detection, or Data Loss Prevention.
Experience applying version control or continuous integration/continuous delivery (CI/CD) practices to automation content, treating it with the same rigor as software.
Familiarity applying generative artificial intelligence (GenAI) tools and capabilities to Cyber Security Operations Center use cases, such as accelerating triage, summarization, or investigation workflows.

What’s the role?

Bloomberg’s Cyber Security Operations Center (CSOC) plays a critical role in safeguarding the company’s digital environment, actively monitoring systems and networks for any signs of suspicious activity. When a confirmed incident occurs, CSOC leads containment and response efforts, formalizing lessons learned and hardening defenses against future attacks.

The Process & Technology Optimization (PTO) team within CSOC is at the forefront of designing, building, and integrating process and technology solutions to enable CSOC functions to thrive and improve. As a PTO staff member, you will play a crucial role in understanding the evolving challenges faced by CSOC teams, driving moonshot goals, and implementing scalable, innovative solutions that shape the future of cyber security operations at Bloomberg.

We will trust you to:

Design & Implement Solutions

Design, build, and test process and technology solutions for prioritized use cases, including automation content, platform configuration, and tooling integrations, from initial design through validation and deployment
Maintain and troubleshoot the automation content, integrations, and configurations you own, adapting them when upstream platforms, vendor products, or data sources change
Support the implementation and configuration of vendor-provided and internally developed products, keeping delivery consistent with the broader technology vision the team has set
Document your work by maintaining SOPs, runbooks, and task-level documentation so others can support and extend what you’ve built
Communicate progress, blockers, and observations to keep the team and requesting stakeholders informed
Collaborate with senior PTO team members on design and technical decisions, drawing on their guidance and experience, and progressively take on greater independent ownership as you grow in the role

Identify Optimizations

Engage with CSOC functions (Event Analysis, Threat Hunting, Incident Response, Detection Engineering, Threat Intelligence, etc.) to understand the problem behind a requested automation, not just the request as stated
Identify systemic issues and look for opportunities to re-engineer the underlying process rather than automate it as-is, documenting potential approaches and escalating for alignment when resolution needs broader prioritization
Flag and escalate issues and gaps wherever you find them, whether in automation requirements, in technologies CSOC depends on, or in controls operated by other teams across the environment
Serve as PTO’s on-the-ground presence in APAC, building strong relationships with the CSOC team and the broader set of stakeholders in the region while representing and delivering on priorities and direction that benefit CSOC as a whole

You’ll need to have:

Technical Expertise

3+ years of experience in cybersecurity operations, systems engineering, or a related technical role (e.g., as an analyst, detection engineer, security engineer, or incident responder)
Demonstrated, hands-on experience designing, building, and maintaining automations on a Low Code/No Code platform such as a SOAR
Practical exposure to technical products common to modern SOCs (e.g., Endpoint Detection & Response (EDR), Threat Intelligence Platforms, Email Analysis, Malware Sandboxing, Network Intrusion Detection, Data Loss Prevention)
Experience with data storage and retrieval systems (e.g., SIEM, databases, data lakes, etc.)
Ability to read and write Python to a moderate skill level, sufficient to build, comprehend, and maintain automation content
Ability to break down a complex process and identify concrete opportunities for improvement
Ability to quickly learn and adapt to new technologies and products, given how frequently the security landscape evolves

Problem Solving & Critical Thinking

Proven ability to dissect technical and operational problems into their component parts
Curious, ambitious mindset with the drive to look past the literal ask and pursue the better underlying solution

Collaboration & Communication

Inquisitive and curious listener
Clear and concise written and verbal communication
Comfortable acquiring context from others and sharing it effectively across the team

We’d love to see:

Python or scripting skills sufficient to build custom integrations or work directly against vendor APIs when a low-code platform’s built-in actions fall short
Hands-on experience administering or engineering one or more SOC product categories, such as EDR, Threat Intelligence Platforms, Email Analysis, Malware Sandboxing, Network Intrusion Detection, or Data Loss Prevention
Experience applying version control or CI/CD practices to automation content, treating it with the same rigor as software
Familiarity applying GenAI tools and capabilities to CSOC use cases, such as accelerating triage, summarization, or investigation workflows

If this sounds like you:

Apply if you think we're a good match. We'll get in touch to let you know what the next steps are, but in the meantime feel free to have a look at this: www.bloomberg.com/professional

Why Bloomberg?

We’re individuals with diverse backgrounds, talents, and experiences who take on big challenges and create even bigger impact through our work. We’re interested in what makes you you, and how we can create opportunities for you to channel your unique, personal energy and grow to your fullest potential.

Learn more about our office and benefits:

Tokyo | www.bloomberg.com/tokyo

Discover what makes Bloomberg unique - watch our podcast series for an inside look at our culture, values, and the people behind our success.

About the Company

Bloomberg

Global financial data, news, analytics provider

Bloomberg provides financial data, news, and analysis to help professionals make informed decisions and operate more transparently and efficiently. Its products deliver trusted information and insights through technology platforms that connect global financial communities, enable collaboration, and support decision-making. The company differentiates itself by offering broad, reliable data and news across markets, strong customer focus, and a culture that emphasizes collaboration, broad perspective, and doing the right thing for clients, people, and communities. Bloomberg’s goal is to improve market transparency and efficiency by delivering accurate information and tools that empower customers to act confidently and ethically.

Company size: 10,001+
Company stage: Not listed
Total funding: Not listed
Headquarters: New York City, New York
Founded: 1981

Recently Posted Jobs

Explore more opportunities at Bloomberg

See more jobs