【職種】IT技術職＞SE（Web・オープン系）
【業種】IT・インターネット＞インターネットサービス

※会員属性などに応じ、当該求人をビズリーチ上で閲覧された際に内容が異なる場合があります

[Business Overview]
The Technology Management Division (TMD) provides corporate IT, cyber security, and privacy governance to Rakuten Group companies and essential business management for technology organizations, thereby enabling innovation and strengthening its technology foundation. Within TMD, the Information Security Supervisory Department (ISSD) combines proactive cyber defense with strategic information security, privacy, and data governance to protect the company’s global assets and data.

[Department Overview]
The Cyber Security Defense Department (CSDD) is responsible for safeguarding all Rakuten companies and users from cyber threats, ensuring the security and integrity of Rakuten Group's global internet services. We oversee all aspects of both Secure Development and Security Operations for services developed within th

【必須（MUST）】
・
Education:
Bachelor’s
degree
in
Computer
Science,
Cybersecurity,
Information
Systems,
or
a
related
field
(or
equivalent
professional
experience)
・
Professional
Experience:
More
than
8
years
of
experience
in
cybersecurity,
with
a
proven
track
record
in
security
architecture,
system
design,
or
senior-level
security
engineering
・
Architectural
Expertise:
Demonstrated
experience
in
designing
secure
system
architectures,
integrating
security
into
the
SDLC,
and
applying
security
patterns
(e.g.,
Zero
Trust,
Defense-in-Depth)
to
complex
enterprise
environments
・
Operational
Foundation:
Strong
understanding
of
security
operations
(SIEM,
Incident
Response,
Forensics)
sufficient
to
inform
the
design
of
resilient,
monitorable,
and
defensible
architectures
・
Framework
Proficiency:
Expert-level
knowledge
of
industry-standard
frameworks
(NIST,
CIS,
ISO
27001)
and
the
ability
to
map
these
requirements
to
technical
controls
and
business
processes
・
Cloud
&
Modern
Infrastructure:
Significant
experience
designing
and
governing
secure
architectures
within
major
commercial
cloud
environments
(e.g.,
AWS,
GCP,
or
Azure)
・
Threat-Informed
Design:
Deep
familiarity
with
the
MITRE
ATT&CK
framework,
specifically
how
to
translate
adversary
TTPs
into
proactive
architectural
hardening
and
detection
requirements
・
Communica