Security Detection & Automation Engineer - Product Security Section, Cyber Security Defense Department (CSDD)
Rakuten · JP
15 days agoImpress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Security Detection & Automation Engineer - Product Security Section, Cyber Security Defense Department (CSDD) role.
Rezi rewrites your resume against Rakuten's job description. Free.
Tailor your resume to this Security Detection & Automation Engineer - Product Security Section, Cyber Security Defense Department (CSDD) role.
Rezi rewrites your resume against Rakuten's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Security Detection & Automation Engineer - Product Security Section, Cyber Security Defense Department (CSDD) posting at Rakuten — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Security Detection & Automation Engineer - Product Security Section, Cyber Security Defense Department (CSDD) posting at Rakuten — free, in seconds.
About the Role
This role focuses on building the "eyes and ears" of the security ecosystem by developing automated detection logic, engineering security-as-code solutions, and building response playbooks to protect the private cloud environment. The goal is to reduce time-to-detect and time-to-remediate through automation, ensuring global services remain resilient against evolving threats.
Responsibilities
- Develop, tune, and maintain high-fidelity detection rules (SIEM/EDR/Cloud-Native tools) to identify malicious activity across our global hybrid cloud infrastructure.
- Design and implement automated workflows (SOAR) to respond to common threats, reducing manual toil for the security operations team.
- Partner with SRE and DevOps teams to integrate automated security guardrails into CI/CD pipelines.
- Proactively analyze logs, traffic patterns, and system telemetry to identify sophisticated threats that bypass traditional signature-based defenses.
- Build automated systems to verify the security posture of hybrid cloud configurations, ensuring continuous compliance and drift detection.
- Build custom internal tools or scripts (Python/Go) to bridge gaps in our security stack and improve visibility across our cloud ecosystem.
Requirements
- More than 4 years of experience in security engineering, detection engineering, or incident response.
- Hands-on experience securing container orchestration (Kubernetes), virtualized environments and cloud-native environments (AWS, GCP, or Azure).
- Strong proficiency in at least one language (Python, Go, or Ruby) for security automation and API integration.
- Experience developing detection rules in SIEM or EDR/Cloud security platforms.
- Proven ability to automate manual security tasks (SOAR or custom scripts).
- Deep understanding of network protocols, OS internals (Linux/Windows), and web application architectures.
- Ability to work effectively in a global, cross-functional team and communicate complex technical concepts clearly.
- Experience mapping detections to frameworks like MITRE ATT&CK.
- Experience with CI/CD tools (Jenkins, GitLab CI, GitHub Actions) and security-as-code practices.
- Experience with identity-centric security and micro-segmentation.
- Relevant security certifications (e.g., GCIA, GDAT).
Skills
- Security Engineering
- Detection Engineering
- Incident Response
- Kubernetes
- AWS
- GCP
- Azure
- Python
- Go
- Ruby
- SIEM
- EDR
- SOAR
- CI/CD
- Jenkins
- GitLab CI
- GitHub Actions
- MITRE ATT&CK
- Network Protocols
- Linux
- Windows
- Web Application Architectures
- Identity-centric security
- Micro-segmentation
Experience Level
- More than 4 years of experience
About the Company
- The Technology Management Division (TMD) provides corporate IT, cyber security, and privacy governance to Rakuten Group companies and essential business management for technology organizations, thereby enabling innovation and strengthening its technology foundation.
- Within TMD, the Information Security Supervisory Department (ISSD) combines proactive cyber defense with strategic information security, privacy, and data governance to protect the company’s global assets and data.
- The Cyber Security Defense Department (CSDD) is responsible for safeguarding all Rakuten companies and users from cyber threats, ensuring the security and integrity of Rakuten Group's global internet services.
- We oversee all aspects of both Secure Development and Security Operations for services developed within the group, with dedicated security teams and operation centers strategically located in key regions worldwide.