发布于 2026-10-20
英文原文
安全检测与自动化工程师
Security Detection & Automation Engineer - Product Security Section, Cyber Security Defense Department (CSDD)
楽天グループ
| 职种 | 工程 |
雇用形态 | — |
| 工作地点 | 日本、東京都 |
薪资 | 面议 |
职位概要
乐天集团技术管理本部信息安全监督部下的网络安全防御部招聘安全检测与自动化工程师,负责构建安全生态系统的检测与响应能力。主要职责包括:开发、调优和维护高保真检测规则(SIEM/EDR/云原生工具),识别全球混合云基础设施中的恶意活动;设计并实施SOAR自动化工作流以响应常见威胁,减少安全运营团队的人工负担;与SRE和DevOps团队合作,将自动化安全护栏集成到CI/CD流水线中;主动分析日志、流量模式和系统遥测数据,识别绕过传统签名防御的高级威胁;构建自动化系统验证混合云配置的安全态势,确保持续合规和漂移检测;使用Python/Go构建内部工具或脚本,弥补安全栈缺口并提升云生态可见性。必备资格:4年以上安全工程、检测工程或事件响应经验;具有保护容器编排(Kubernetes)、虚拟化环境和云原生环境(AWS、GCP或Azure)的实操经验;精通至少一种语言(Python、Go或Ruby)用于安全自动化和API集成;具有在SIEM或EDR/云安全平台开发检测规则的经验;具备自动化手动安全任务(SOAR或自定义脚本)的证明能力;深入理解网络协议、操作系统内部(Linux/Windows)和Web应用架构;能够在全球跨职能团队中有效工作并清晰沟通复杂技术概念。优先资格:具有将检测映射到MITRE ATT&CK等框架的经验;具有CI/CD工具(Jenkins、GitLab CI、GitHub Actions)和安全即代码实践经验;具有以身份为中心的安全和微隔离经验;相关安全认证(如GCIA、GDAT)。语言要求:英语(整体-3-高级)。
职位描述
Job Description: Business Overview The Technology Management Division (TMD) provides corporate IT, cyber security, and privacy governance to Rakuten Group companies and essential business management for technology organizations, thereby enabling innovation and strengthening its technology foundation. Within TMD, the Information Security Supervisory Department (ISSD) combines proactive cyber defense with strategic information security, privacy, and data governance to protect the companyâs global assets and data. Department Overview The Cyber Security Defense Department (CSDD) is responsible for safeguarding all Rakuten companies and users from cyber threats, ensuring the security and integrity of Rakuten Group's global internet services. We oversee all aspects of both Secure Development and Security Operations for services developed within the group, with dedicated security teams and operation centers strategically located in key regions worldwide. Position: Position Details To deliver comprehensive cybersecurity by embedding robust security into the design, development, and delivery of Rakuten's products and protecting our production systems through high-fidelity detection, automated response, and scalable security engineering. We are looking for a Security Detection & Automation Engineer to join our team. You will be responsible for building the "eyes and ears" of our security ecosystem. You will develop automated detection logic, engineer security-as-code solutions, and build response playbooks that protect our private cloud environment. Your goal is to reduce the time-to-detect and time-to-remediate through automation, ensuring our global services remain resilient against evolving threats. ã»Develop, tune, and maintain high-fidelity detection rules (SIEM/EDR/Cloud-Native tools) to identify malicious activity across our global hybrid cloud infrastructure ã»Design and implement automated workflows (SOAR) to respond to common threats, reducing manual toil for the security operations team ã»Partner with SRE and DevOps teams to integrate automated security guardrails into CI/CD pipelines ã»Proactively analyze logs, traffic patterns, and system telemetry to identify sophisticated threats that bypass traditional signature-based defenses ã»Build automated systems to verify the security posture of hybrid cloud configurations, ensuring continuous compliance and drift detection ã»Build custom internal tools or scripts (Python/Go) to bridge gaps in our security stack and improve visibility across our cloud ecosystem Mandatory Qualifications: ã»More than 4 years of experience in security engineering, detection engineering, or incident response ã»Hands-on experience securing container orchestration (Kubernetes), virtualized environments and cloud-native environments (AWS, GCP, or Azure) ã»Strong proficiency in at least one language (Python, Go, or Ruby) for security automation and API integration ã»Experience developing detection rules in SIEM or EDR/Cloud security platforms ã»Proven ability to automate manual security tasks (SOAR or custom scripts) ã»Deep understanding of network protocols, OS internals (Linux/Windows), and web application architectures ã»Ability to work effectively in a global, cross-functional team and communicate complex technical concepts clearly Desired Qualifications: ã»Experience mapping detections to frameworks like MITRE ATT&CK ã»Experience with CI/CD tools (Jenkins, GitLab CI, GitHub Actions) and security-as-code practices ã»Experience with identity-centric security and micro-segmentation ã»Relevant security certifications (e.g., GCIA, GDAT) #engineer #securityengineer #technologymanagementdiv Languages: English (Overall - 3 - Advanced) In Japanese, Rakuten stands for âoptimism.â It means we believe in the future. Itâs an understanding that, with the right mind-set, we can make the future better by what we do today. So we challenge ourselves to evolve, innovate and experiment, to create a better, brighter future for everyone. Today, our 70+ businesses span e-commerce, digital content, communications and fintech, bringing the joy of discovery to almost 1.3 billion members across the world. If you have any trouble logging in, please contact us here Rakuten Group, Inc.: rakuten-recruiting-info@mail.rakuten.com *Please read the Application Requirements(EN) / åéè¦é (JP) before applying. Our Diversity & Inclusion Policy and Application Documents Rakutenâs corporate mission is to âcontribute to society by creating value through innovation and entrepreneurship.â We foster a culture that provides equal opportunities to those who share this founding philosophy and take on the challenge to transform society, regardless of age, gender, nationality, or any other status. Diversity is one of Rakuten's core strategies and a driving force for innovation. Because of this, you are not required to submit any of the following information in order to apply for our job positions. - Gender - Age - Photo - Nationality* - Information not related to business, such as ideological beliefs, family structure, etc. * For legal compliance, we may ask you about your work eligibility. See the details