Security Operations TPM, Senior Engineer

Woven by Toyota is the mobility technology subsidiary of Toyota Motor Corporation. Our mission is to deliver safe, intelligent, human-centered mobility for all. Through our Arene mobility software platform, safety-first automated driving technology and Toyota Woven City — our test course for advanced mobility — we’re bringing greater freedom, safety and happiness to people and society.
Our unique global culture weaves modern Silicon Valley innovation and time-tested Japanese quality craftsmanship. We leverage these complementary strengths to amplify the capabilities of drivers, foster happiness, and elevate well-being.
TEAMThe Woven City Product Security Team is responsible for the cyber security of the Woven City project, a smart city built at the base of Mt Fuji in Japan. Smart cities rely on a distributed network of sensors to capture vast amounts of data that city planners can use to improve the quality of services and welfare of their citizens. This ever-increasing complexity creates new security and privacy challenges that can lead to gaps in essential services and privacy breaches of citizens and visitors. What if we have the opportunity to build a smart city from the ground up to support the city’s residents with attention to security, privacy, and safety?
WHO ARE WE LOOKING FORWe are looking for an experienced senior security operations Technical Program Manager (TPM) or experienced Senior Engineer who will work with the Woven City and existing Security Operations Center (SOC) teams to create and lead a new healthy SOC program (people, process, and technology) for a new part of our business from the ground up and mature it over time. You will build and borrow from our existing SOC tech stacks to integrate and design cloud-based security technologies for SOC, including SIEM, VM, EDR and on premise NIDS for our new part of the business. You will analyze the system architecture, operating systems, networks and applications that make up Woven City, and understand how they fit into the city as a whole to design systems and process solutions to ensure coverage for security monitoring and response purposes. You will report to an engineering manager in a hybrid role onsite several days per week.

RESPONSIBILITIES:

• Gather and document both functional and non-functional requirements for our SOC integration and implementation, playing an important role in defining the scope of the SOC project, with a special emphasis on evaluating and integrating technologies such as IDS/IPS, NDR, SIEM, and EDR.
• Detailed solution design and architecture for integration and implementation of security operations tooling including IDS or IPS and SIEM technology into Woven City IT infrastructure and products.
• Establish connections and work closely with various stakeholders to ensure their needs are met and their feedback is incorporated during the planning phase.
• Work with Woven SOC, and Woven City teams to understand current and proposed technology and process stacks, and timelines for Woven City go-live.
• Work directly key stakeholders to develop operational plans and policy for security operations, including incident response plans, vulnerability management policy, operating models.

MINIMUM QUALIFICATIONS:

• Bachelor’s degree in Computer Science, Computer Engineering or related field, or 7+ years relevant work experience
• Strong understanding of terraform, kubernetes services (deployment and development), detection and response in combinational multi-cloud and on-prem environments, embedded systems.
• Experience with observability frameworks and systems like OpenTelemetry, the ELK Stack, Wavefront, etc.
• Experience designing on-premise and/or cloud network logging and security monitoring architecture.
• Security expertise in designing cloud-based IDS/IPS, SIEM, XDR, and EDR technologies..
• Experience in SOC technologies and process design and implementation from the ground up, including Microsoft Sentinel, Lighthouse, Defender.
• Demonstrated ability in handling or planning large-scale security projects, including planning out resource management, and execution.
• Extensive experience handling security operations.

NICE TO HAVES:

• Japanese language fluency
• An understanding of the Japanese Cyber Security regulatory environment

If you are located outside of Japan we will set up an interview over Google Hangout Meet.
WHAT WE OFFER・Competitive Salary - Based on experience・Work Hours - Flexible working time with NO core-hours・Paid Holiday - 20 days per year (prorated)・Sick Leave - 6 days per year (prorated)・Holiday - Sat & Sun, Japanese National Holidays, and other days defined by our company・Japanese Social Security - all applicable (Health Insurance, Pension, Workers’ Comp, and Unemployment Insurance, Long-term care insurance)・In-house Training Program (software study/language study)
By submitting your application you agree to the following terms: https://woven.toyota/en/applicant-privacy-notice
Our Commitment・We are an equal opportunity employer and value diversity.・We pledge that any information we receive from you will be used ONLY for the purpose of hiring assessment.