安全架构师（云安全监控与事件响应）

Job Description: Business Overview The Technology Management Division (TMD) provides corporate IT, cyber security, and privacy governance to Rakuten Group companies and essential business management for technology organizations, thereby enabling innovation and strengthening its technology foundation. Within TMD, the Information Security Supervisory Department (ISSD) combines proactive cyber defense with strategic information security, privacy, and data governance to protect the company’s global assets and data. Department Overview The Cyber Security Defense Department (CSDD) is responsible for safeguarding all Rakuten companies and users from cyber threats, ensuring the security and integrity of Rakuten Group's global internet services. We oversee all aspects of both Secure Development and Security Operations for services developed within the group, with dedicated security teams and operation centers strategically located in key regions worldwide. Position: Position Details To design and evolve a world-class security monitoring and response ecosystem that provides deep observability and rapid defense capabilities across Rakuten’s global hybrid cloud infrastructure, ensuring our ecosystem is both secure by design and resilient by default. We are looking for a visionary Security Architect to lead the design of our global cloud security monitoring and incident response infrastructure. You will be the technical authority responsible for creating the blueprint for how we ingest, analyze, and act upon security telemetry for our private cloud environments. You will bridge the gap between high-level security strategy and technical implementation, ensuring our platforms are capable of detecting and neutralizing advanced threats at scale. ・Design and architect the next-generation security monitoring platform (SIEM/Data Lake/SOAR) capable of handling massive telemetry volume across a global, private cloud footprint ・Define the architectural patterns for high-fidelity detection, ensuring that security logs, cloud-native telemetry, and endpoint data are effectively correlated ・Architect the automated response framework (SOAR) to ensure we can contain threats at machine speed, minimizing the impact of incidents on production ・Collaborate with SRE and Cloud Platform teams to embed "Security Observability" into our infrastructure, ensuring we have the visibility required for modern threat hunting ・Evaluate and select security technologies (commercial and open-source) that align with Rakuten’s scale, latency requirements, and long-term security goals ・Establish global architectural standards for logging, monitoring, and response to ensure consistency across all Rakuten business units Mandatory Qualifications: ・More than 10 years in IT/Security, with at least 5 years in Security Architecture, specifically focusing on SOC infrastructure or large-scale monitoring systems ・Deep expertise in architecting security for multi-cloud environments (private cloud, AWS, GCP, Azure) ・Extensive experience designing and scaling SIEM/Log Management platforms (e.g., Splunk, Chronicle, Elastic, Sentinel) ・Proven experience designing SOAR or custom automated response workflows for large-scale production environments ・Understanding of data pipelines, streaming technologies (e.g., Kafka), and the challenges of high-volume telemetry ingestion ・Exceptional ability to translate complex security architectural requirements into actionable roadmaps for engineering teams and business stakeholders ・Strong knowledge of MITRE ATT&CK, NIST, or similar frameworks as they apply to detection and response architecture Desired Qualifications: ・Experience connecting private cloud/on-premise data centers to public cloud security monitoring architectures ・Background in software development or systems engineering; ability to "code" as part of the architectural design process ・Experience working in highly regulated, global industries (FinTech, E-commerce, Telecom) ・TOGAF, CISSP-ISSAP, or advanced cloud-architect certifications #engineer #securityengineer #technologymanagementdiv Languages: English (Overall - 3 - Advanced) In Japanese, Rakuten stands for ‘optimism.’ It means we believe in the future. It’s an understanding that, with the right mind-set, we can make the future better by what we do today. So we challenge ourselves to evolve, innovate and experiment, to create a better, brighter future for everyone. Today, our 70+ businesses span e-commerce, digital content, communications and fintech, bringing the joy of discovery to almost 1.3 billion members across the world. If you have any trouble logging in, please contact us here Rakuten Group, Inc.: rakuten-recruiting-info@mail.rakuten.com *Please read the Application Requirements(EN) / 募集要é (JP) before applying. Our Diversity & Inclusion Policy and Application Documents Rakuten’s corporate mission is to “contribute to society by creating value through innovation and entrepreneurship.” We foster a culture that provides equal opportunities to those who share this founding philosophy and take on the challenge to transform society, regardless of age, gender, nationality, or any other status. Diversity is one of Rakuten's core strategies and a driving force for innovation. Because of this, you are not required to submit any of the following information in order to apply for our job positions. - Gender - Age - Photo - Nationality* - Information not related to business, such as ideological beliefs, family structure, etc. * For legal compliance, we may ask you about your work eligibility. See the details