Security Engineering Lead

必須

• Bachelor's degree or equivalent experience in Cybersecurity, Information Technology, or related field, such as Computer Science.
• Language proficiency in English at Fluent level. Intermediate level Japanese (email communication and reading Japanese materials, conversations at meetings with local counterparts)
• 3+ years of experience in a supervisory lead or management role
• 12+ years of experience in on premise and cloud security or related roles, with hands-on experience in cloud platforms such as AWS, Azure, or Google Cloud
• 8+ years of direct, hands-on experience with on premise and Cloud Security Posture management solutions including compute agents, DevOps code scanning deployment, and posture management policy tuning, utilizing IaC automation for efficient and secure cloud operations.
• Deep and broad understanding of cloud/cloud hybrid platforms (IDaaS/IaaS/SaaS/PaaS) and associated security tools and processes.
• Proficiency in implementing robust security measures, including agent/agentless workload defenders, in cloud-native environments such as Kubernetes (AKS, EKS, GKS) and Azure Functions.
• Recent and relevant experience in vulnerability analysis and exploitation techniques.
• Troubleshoot issues within the product when necessary, assisting different teams, crash dumps, performance monitor and release blockers.
• In depth knowledge of Critical Security Controls like NIST, CIS Benchmarks, DISA STIG standards etc.
• Familiarity with International Security standards and Industry framework like ISO 27001/27002, PCI DSS and SOX.
• In depth knowledge and expertise with Infrastructure hardening and Security settings for Windows and Linux.
• Intermediate to Expert level knowledge on Windows & Active Directory, Unix/Linux Operating Systems.
• Strong knowledge of Cloud computing, Virtualization concepts and PaaS/SaaS services.
• Strong knowledge of TCP/IP and HTTP protocols.
• Strong knowledge of Endpoint Security Concepts and Incident Response processes
• Experience with SIEM & tool integrations – CrowdStrike NextGen SIEM is preferred
• Strong Security Framework knowledge

歓迎

• Additional certifications such as, CISSP, CCSP, Security+, foundational/associate/security tracks for Azure, AWS, GCP are a plus.
• Good scripting knowledge using PowerShell, Python, Linux shell is desired.

求める人物像

• Be an energetic “self-starter” who is empowered to take ownership and be accountable for deliverables, both individually and as part of a growing team.
• Team player – able to lead, mentor, communicate, collaborate, and work effectively in a globally distributed team.

使用ツール

About the role

• The Japan Security Engineering Lead will drive security engineering efforts related to the AIG Security Stack (Crowdstrike, Tanium, Qualys, Imperva DAM/DAS, Microsoft Purview/Defender, ProofPoint, Trend Micro, Varonis, SafeBreach, Agari DMARC, Prisma, Wiz). The candidate must have extensive experience securing both enterprise-level on premise and Cloud services, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS) across multiple cloud providers, including AWS, Google Cloud Platform (GCP), Microsoft Azure (Azure). The candidate must also have subject matter expertise in on premise and Cloud Security Architectures, Vulnerability Management and Network Defense to help protect the firm’s cloud workloads and data deployed into different types of cloud and cloud/hybrid systems. The Japan Security Engineering Lead will serve as a key technical expert for the Information Security Organization and other Information Security teams for all matters related to the AIG Security Stack across the Japan and APAC regions.

Responsibilities

• Lead the deployment, management/maintenance, and Follow the Sun support of AIG security stack for on premise infrastructure and cloud service offerings from AWS, Microsoft Azure, or Google Cloud Platform (GCP) to identify threats, risks, and controls to secure the services.
• Operate as a trusted advisor for on premise and cloud AIG Security Stack, mentoring junior team members and developers to understand threats and risk mitigation options for on premise and cloud services.
• Collaborate with other information security teams to help address critical security risks to the business. Ensure that cloud security risk related issues are appropriately monitored and addressed within the IT environment.
• Work with stakeholders to develop, maintain, and enforce cloud security policies and procedures.
• Collaborate with the security architecture team, cloud security engineering team, security remediation team, and application and infrastructure teams to protect on premise and cloud workloads and data deployed into different types of on premise, cloud and cloud/hybrid systems.
• Support the development of security policies, standards, and procedures for cloud-based applications and infrastructure leveraging cloud security solutions.