Product Security Engineer, Cloud & DevSecOps - Cyber Security Defense Department (CSDD)
Core
Leading and executing security operations for Rakuten products, integrating security controls throughout the software development lifecycle (SDLC) to safeguard global internet services.
Role type
Product Security Engineer, Cloud & DevSecOps
Builds
Secure Rakuten Ecosystem products and cloud infrastructure
Domain
Cyber Security, Cloud Infrastructure, DevSecOps
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
application vulnerability assessment, network penetration testing, cloud security automation, programming (Java, PHP, Python, JavaScript), vulnerability management, incident response, DevSecOps integration, SDLC security
Preferred skills
enterprise security testing (SAST, DAST, SCA), cloud infrastructure security (CSPM, CWPP, CIEM), CI/CD tools (GitHub Actions, Jenkins, Terraform), cloud-native technologies (containers, Kubernetes, microservices)
Technologies
Java, PHP, Python, JavaScript, GitHub Actions, Jenkins, Terraform, Kubernetes, microservices
Responsibilities
Lead and execute product security operations including secure development consultation and vulnerability management; Optimize and operate security posture management across cloud infrastructure; Integrate security controls with product development teams; Collaborate with stakeholders to ensure security requirements are met; Provide expert security guidance and practical solutions; Apply threat intelligence to address emerging threats
Seniority
Mid-level, hands-on IC