[Hiring] Threat Detection Analyst @Fastly

Role Description

Fastly is seeking a Threat Detection Analyst to join our dedicated Customer Security Operations Centre. In this role, you will be a frontline defender for Fastly’s global enterprise customers. You will leverage our edge cloud platform and an array of security products in monitoring traffic, detect sophisticated anomalies, and deploy real-time mitigations against DDoS, Bot, and Web Application attacks. This is a high-impact role where you act as a strategic partner for our Managed Security Service (MSS) clients, providing the expert visibility and rapid response necessary to address internet-scale threats.

What you’ll Do:

• Active Incident Response: Lead the identification and mitigation of high-impact security events. Analyze sophisticated traffic patterns and implement precise countermeasures, including rate limiting and custom WAF & Security rules to neutralize threats in real-time.
• Managed Security Delivery: Serve as a primary security consultant for MSS Customers. Continuous tuning and refining of security policies to optimize detection accuracy and maintain a hardened security posture tailored to each client's unique environment.
• Advanced Threat Hunting: Conduct data-driven investigations using log analysis to uncover potential threats and hardening opportunities.
• Security Intelligence & Reporting: Author comprehensive After Action Reports (AARs) and monthly security summaries. Translate complex telemetry and attack data into high-level actionable insights for customer stakeholders.
• Strategic Communication: Act as the Subject Matter Expert (SME) during active security incidents. Provide clear, calm, and professional guidance via real-time communication channels, ensuring customers are informed and confident in our defensive strategy.

Qualifications

• Web Security Expertise: Comprehensive understanding of the OWASP Top 10 and advanced attack vectors (e.g., Credential Stuffing, API Abuse, and Layer 7 DDoS). Ability to interpret raw payloads to distinguish between malicious intent and legitimate traffic.
• Protocol Proficiency: Deep technical knowledge of the internet stack, specifically HTTP/S, TCP/IP, DNS, and TLS. Comfortable analyzing handshake processes, header structures, and status codes.
• Analytical Rigor: Methodical approach to digital forensics and incident response. Ability to correlate disparate data points within JSON or CSV logs to reconstruct an attack narrative.
• Communication Excellence: Ability to distill complex technical findings into concise, professional, and empathetic communications for both technical and non-technical audiences.

Requirements

• Proficiency in Python or Bash for log parsing and workflow automation.
• Experience with Infrastructure as Code/Security as Code (SaC) (Terraform) or edge-based configurations.
• Industry-standard certifications such as CompTIA CySA+, GCIH, or Security+.

Work Hours

• This position will require you to be available during core business hours.
• Tuesday to Saturday during JPN business hours.
• Tuesday to Saturday: 10 am to 6 PM AEST and 11 am to 7 pm AEDT.

Work Location(s) & Travel Requirements

• This position is a remote position based out of (locality), with the possibility of becoming a hybrid position as Fastly expands its presence in the region.
• This position will require travel to the US and Internationally, as required by your role or requested by your manager.

Benefits

• We care about you. Fastly works hard to create a positive environment for our employees, and we think your life outside of work is important too.
• We offer a comprehensive benefits package designed to meet your needs. Our offerings may vary depending on the country where you work and are subject to change.

Why Fastly?

• We have a huge impact. Fastly is a small company with a big reach.
• We value diversity. Growing and maintaining our inclusive and diverse team matters to us.
• We are passionate. Fastly is chock full of passionate people and we’re not ‘one size fits all’.