安全架构师

Job Description: Business Overview The Technology Management Division (TMD) provides corporate IT, cyber security, and privacy governance to Rakuten Group companies and essential business management for technology organizations, thereby enabling innovation and strengthening its technology foundation. Within TMD, the Information Security Supervisory Department (ISSD) combines proactive cyber defense with strategic information security, privacy, and data governance to protect the company’s global assets and data. Department Overview The Cyber Security Defense Department (CSDD) is responsible for safeguarding all Rakuten companies and users from cyber threats, ensuring the security and integrity of Rakuten Group's global internet services. We oversee all aspects of both Secure Development and Security Operations for services developed within the group, with dedicated security teams and operation centers strategically located in key regions worldwide. Position: Position Details The Security Architect acts as the strategic partner to our Security Engineering (SIEM/IR) team. While the Security Engineering team focuses on the "detect and respond" lifecycle, the Security Architect focuses on the "design and prevent" lifecycle. You will define the security blueprints, architectural standards, and governance models that our security engineers will ultimately monitor and defend. This role is a perfect fit for a senior expert with leadership aspirations who wants to influence the security posture of the entire Rakuten ecosystem. Unlike purely consultative roles, this position allows you to influence the Cyber Security Defense Department’s operational efficiency. By designing the standards that the SIEM/IR team enforces, you are directly responsible for reducing the "noise" and increasing the "signal" in our global security operations. ・ Develop and maintain technical security standards, policies, and guidelines that provide the foundation for secure system development ・ Lead security requirements and design reviews for new projects, ensuring that architectural flaws are caught before they reach production ・ Collaborate closely with the SIEM & Incident Response team to translate real-world threat data (TTPs, IOCs) into proactive architectural changes and hardening strategies ・ Mentor junior staff and collaborate with cross-functional stakeholders to build consensus on security roadmaps ・ Drive the evolution of our security posture by integrating modern security patterns (e.g., Zero Trust, DevSecOps) into the SDLC ・ Work in tandem with the Security Engineers ・ Use findings from IR playbooks and SIEM detection use cases to update organizational security policies ・ Ensure that as the engineering team develops new detection capabilities, the underlying system architecture supports visibility, logging, and automated remediation Mandatory Qualifications: ・ Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field (or equivalent professional experience) ・ Professional Experience: More than 8 years of experience in cybersecurity, with a proven track record in security architecture, system design, or senior-level security engineering ・ Architectural Expertise: Demonstrated experience in designing secure system architectures, integrating security into the SDLC, and applying security patterns (e.g., Zero Trust, Defense-in-Depth) to complex enterprise environments ・ Operational Foundation: Strong understanding of security operations (SIEM, Incident Response, Forensics) sufficient to inform the design of resilient, monitorable, and defensible architectures ・ Framework Proficiency: Expert-level knowledge of industry-standard frameworks (NIST, CIS, ISO 27001) and the ability to map these requirements to technical controls and business processes ・ Cloud & Modern Infrastructure: Significant experience designing and governing secure architectures within major commercial cloud environments (e.g., AWS, GCP, or Azure) ・ Threat-Informed Design: Deep familiarity with the MITRE ATT&CK framework, specifically how to translate adversary TTPs into proactive architectural hardening and detection requirements ・ Communication & Influence: Exceptional ability to translate complex security risks and architectural trade-offs into clear, actionable insights for both technical teams and non-technical executive stakeholders ・ Leadership Potential: Demonstrated interest in people management and a clear ambition to grow into a formal leadership role within the Cyber Security Defense Department (CSDD) ・ Soft Skills: Proven ability to build consensus, navigate complex organizational structures, and maintain a collaborative approach in a fast-paced, high-pressure environment Desired Qualifications: ・ Related professional certifications such as CISSP, CISM, or equivalent architectural certifications ・ Japanese language skills are a significant advantage for cross-departmental coordination #engineer #securityengineer #technologymanagementdiv Languages: English (Overall - 3 - Advanced) In Japanese, Rakuten stands for ‘optimism.’ It means we believe in the future. It’s an understanding that, with the right mind-set, we can make the future better by what we do today. So we challenge ourselves to evolve, innovate and experiment, to create a better, brighter future for everyone. Today, our 70+ businesses span e-commerce, digital content, communications and fintech, bringing the joy of discovery to almost 1.3 billion members across the world. If you have any trouble logging in, please contact us here Rakuten Group, Inc.: rakuten-recruiting-info@mail.rakuten.com *Please read the Application Requirements(EN) / 募集要é (JP) before applying. Our Diversity & Inclusion Policy and Application Documents Rakuten’s corporate mission is to “contribute to society by creating value through innovation and entrepreneurship.” We foster a culture that provides equal opportunities to those who share this founding philosophy and take on the challenge to transform society, regardless of age, gender, nationality, or any other status. Diversity is one of Rakuten's core strategies and a driving force for innovation. Because of this, you are not required to submit any of the following information in order to apply for our job positions. - Gender - Age - Photo - Nationality* - Information not related to business, such as ideological beliefs, family structure, etc. * For legal compliance, we may ask you about your work eligibility. See the details