グローバルなハイブリッドクラウド環境におけるセキュリティ監視および対応エコシステムの設計とアーキテクチャ標準の策定を担当します。ITセキュリティ分野で10年以上の経験があり、そのうち5年以上はセキュリティアーキテクチャ（SOCや大規模監視システム）の実務経験が必須です。SIEM、SOAR、マルチクラウド環境に関する深い専門知識が求められ、複雑な要件をエンジニアリングロードマップに落とし込む能力が必要です。MITRE ATT&CKまたはNISTフレームワークの知識も必須です。
The Technology Management Division (TMD) provides corporate IT, cyber security, and privacy governance to Rakuten Group companies and essential business management for technology organizations, thereby enabling innovation and strengthening its technology foundation. Within TMD, the Information Security Supervisory Department (ISSD) combines proactive cyber defense with strategic information security, privacy, and data governance to protect the company’s global assets and data.
The Cyber Security Defense Department (CSDD) is responsible for safeguarding all Rakuten companies and users from cyber threats, ensuring the security and integrity of Rakuten Group's global internet services. We oversee all aspects of both Secure Development and Security Operations for services developed within the group, with dedicated security teams and operation centers strategically located in key regions worldwide.
To design and evolve a world-class security monitoring and response ecosystem that provides deep observability and rapid defense capabilities across Rakuten’s global hybrid cloud infrastructure, ensuring our ecosystem is both secure by design and resilient by default.
We are looking for a visionary Security Architect to lead the design of our global cloud security monitoring and incident response infrastructure. You will be the technical authority responsible for creating the blueprint for how we ingest, analyze, and act upon security telemetry for our private cloud environments. You will bridge the gap between high-level security strategy and technical implementation, ensuring our platforms are capable of detecting and neutralizing advanced threats at scale.
More than 10 years in IT/Security, with at least 5 years in Security Architecture, specifically focusing on SOC infrastructure or large-scale monitoring systems ・Deep expertise in architecting security for multi-cloud environments (private cloud, AWS, GCP, Azure)
Extensive experience designing and scaling SIEM/Log Management platforms (e.g., Splunk, Chronicle, Elastic, Sentinel)
Proven experience designing SOAR or custom automated response workflows for large-scale production environments ・Understanding of data pipelines, streaming technologies (e.g., Kafka), and the challenges of high-volume telemetry ingestion ・Exceptional ability to translate complex security architectural requirements into actionable roadmaps for engineering teams and business stakeholders ・Strong knowledge of MITRE ATT&CK, NIST, or similar frameworks as they apply to detection and response architecture
Experience connecting private cloud/on-premise data centers to public cloud security monitoring architectures ・Background in software development or systems engineering; ability to "code" as part of the architectural design process ・Experience working in highly regulated, global industries (FinTech, E-commerce, Telecom)
TOGAF, CISSP-ISSAP, or advanced cloud-architect certifications #engineer #securityengineer #technologymanagementdiv
English (総合 - 3 - 上級)
