Appealing Points
- Lead the transformation of a 24/7 Security Operations Center from a reactive monitoring unit into an autonomous, AI-augmented defense organization.
- Architect and implement AI-driven detection and response workflows, and drive SOAR integration to counter machine-speed autonomous AI attacks.
- Stay at the cutting edge of offensive and defensive AI research while overseeing security for Telco-specific, containerized and Kubernetes environments, and mentoring high-performing security talent.
Annual Salary: ¥10 million and above
Job Description
The Cyber Defense Operations Section runs a 24/7 Security Operations Center (SOC) that protects the group's critical infrastructure. The section is in a critical transformation phase to address the era of autonomous, AI-driven cyber threats. Its goal is to evolve from a reactive monitoring unit into a proactive, intelligence-led and autonomous defense organization. It is seeking a visionary, hands-on SOC Lead to architect future-ready security operations, using AI and automation to neutralize machine-speed attacks while mentoring high-performing security talent.
Job Responsibilities
- Strategic Transformation: Lead the evolution of the SOC from a reactive monitoring unit to an autonomous, AI-augmented defense organization.
- AI & Automation Engineering: Architect and implement AI-driven detection and response workflows. Drive the integration of SOAR (Security Orchestration, Automation, and Response) to counter autonomous AI attacks.
- Operational Leadership: Manage the 24/7 SOC team, ensuring high-availability monitoring, rapid incident response and continuous service improvement.
- Technical Oversight: Provide L3-level escalation support for complex incidents. Oversee security monitoring of Telco-specific network architectures, containerized environments and Kubernetes (K8s) clusters.
- Governance & Documentation: Establish rigorous SOC governance, including creating and maintaining playbooks and SOPs that meet international audit and compliance standards.
- DFIR & Root Cause Analysis: Assist in high-stakes Digital Forensics and Incident Response (DFIR) efforts, conducting deep-dive analysis to harden the environment against future threats.
- Stakeholder Collaboration: Partner with cross-functional security teams and Business Units to ensure security is integrated throughout the infrastructure lifecycle.
- Innovation & Research: Stay at the bleeding edge of offensive and defensive AI research to proactively adapt security posture against evolving adversary tactics.
Required Qualifications
- Leadership: Proven experience leading technical teams in a 24/7 environment, and a demonstrated ability to mentor and grow security talent.
- AI/ML in Security: Deep understanding of leveraging AI for threat hunting, anomaly detection and automated response.
- Telco & Infrastructure: Strong experience in a Telco environment, including knowledge of SS7/Diameter/GTP protocols, 5G core security and virtualization.
- Cloud-Native Security: Expert-level knowledge of containerization (Docker) and Kubernetes (K8s) security.
- Automation: Advanced scripting skills (Python, Go or Bash) and extensive experience with SOAR platforms.
- DFIR: Expert capability in conducting digital forensics and managing incident response lifecycles.
- Experience: 10+ years in Cyber Security, with at least 6 years in a leadership role within a SOC.
- Education: Bachelor's or Master's degree in Computer Science, Cyber Security or a related field.
- Certifications: Relevant industry certifications (e.g., CISSP, CISM, GCIH, GCFA or equivalent).
Preferred Qualifications
- Experience with LLM-based security tools or "AI-vs-AI" defense strategies.
- Experience in high-traffic, low-latency environments typical of modern Telecommunications.
- Active participation in the security community (e.g., public speaking, research papers or open-source security tool development).
- Experience with cloud security (AWS/Azure/GCP) in a hybrid-Telco environment.
Language Requirements: Advanced Business level English
About Company:
The largest eCommerce company in Japan, and the third-largest eCommerce marketplace company worldwide. The organization provides a variety of consumer and business-focused services including e-commerce, e-reading, travel, banking, securities, credit card, e-money, portal and media, online marketing, and professional sports. The company is expanding globally and currently has operations throughout Asia, Western Europe, and the Americas.
[Measures against passive smoking]
No smoking indoors allowed
Designated smoking area
. Skillset Required: AI-driven detection, Response workflows, SOAR integration, Offensive AI research, Defensive AI research, Security for Telco-specific environments, Containerized environment security, Kubernetes (K8s) security, Mentoring security talent, Technical team leadership, AI/ML in Security, Threat hunting, Anomaly detection, Automated response, Telco protocols (SS7, Diameter, GTP), 5G core security, Virtualization, Containerization (Docker), Scripting (Python, Go, Bash), Digital forensics, Incident response lifecycle management, Security governance, Playbook and SOP creation, Cross-functional collaboration, Cloud security (AWS, Azure, GCP), High-availability monitoring, Rapid incident response
Sign in
To continue your applicationor continue with email
By continuing you agree to our Terms & Privacy Policy.
