会社名

楽天グループ株式会社

会社概要

未来を信じ、より良い明日を創っていく。
イノベーションを通じて、人々と社会をエンパワーメントする。私たちは、そんな想いを大切に世界の人々に喜びと楽しさを届けます。
楽天は、E コマース、FinTech、デジタルコンテンツ、通信など、70 を超えるサービスを展開し、世界10 億以上のユーザーに利用されています。
これら様々なサービスを、楽天会員を中心としたメンバーシップを軸に有機的に結び付け、他にはない独自の「楽天エコシステム」を形成しています。ダイバーシティ推進は、楽天にとって最優先の企業戦略のひとつです。従業員の出身は70カ国・地域以上。世界中からユニークで多様な文化的背景や視点を持つ優秀な人材が集まり、イノベーションの原動力になっています。社内カフェテリアにはベジタリアン、ハラル対応のメニューを用意。礼拝所（Prayer room）もあります。
また、仕事と育児の両立支援や、障がい者雇用・活躍促進も積極的に推進。社内のLGBT（※1）当事者やアライ（※2）に対して、情報共有やサポート体制の強化も進めています。誰もが自分らしく力を最大限発揮して働ける。それが楽天のダイバーシティです。

70を超えるサービスを提供し、世界30カ国にサービス展開拠点を持ち、従業員の出身国・地域数は100を超え、オープンポジション制度を活用して多様なキャリアを描くことができる点も魅力です。
フレックスタイム制度、事情に応じたリモートワークの活用が可能です。本社には託児所やフィットネスジム、三食無料で利用可能なカフェテリアが併設されるなど、社員を支える環境が整備されています。

ポジション

1036391　Security Architect (Cloud Monitoring & Response) - Product Security Section, Cyber Security Defense Department (CSDD)

仕事内容

Job Description:
Business Overview
The Technology Management Division (TMD) provides corporate IT, cyber security, and privacy governance to Rakuten Group companies and essential business management for technology organizations, thereby enabling innovation and strengthening its technology foundation. Within TMD, the Information Security Supervisory Department (ISSD) combines proactive cyber defense with strategic information security, privacy, and data governance to protect the company’s global assets and data.

Department Overview
The Cyber Security Defense Department (CSDD) is responsible for safeguarding all Rakuten companies and users from cyber threats, ensuring the security and integrity of Rakuten Group's global internet services. We oversee all aspects of both Secure Development and Security Operations for services developed within the group, with dedicated security teams and operation centers strategically located in key regions worldwide.

Position:
Position Details
To design and evolve a world-class security monitoring and response ecosystem that provides deep observability and rapid defense capabilities across Rakuten’s global hybrid cloud infrastructure, ensuring our ecosystem is both secure by design and resilient by default.


We are looking for a visionary Security Architect to lead the design of our global cloud security monitoring and incident response infrastructure. You will be the technical authority responsible for creating the blueprint for how we ingest, analyze, and act upon security telemetry for our private cloud environments. You will bridge the gap between high-level security strategy and technical implementation, ensuring our platforms are capable of detecting and neutralizing advanced threats at scale.


・Design and architect the next-generation security monitoring platform (SIEM/Data Lake/SOAR) capable of handling massive telemetry volume across a global, private cloud footprint
・Define the architectural patterns for high-fidelity detection, ensuring that security logs, cloud-native telemetry, and endpoint data are effectively correlated
・Architect the automated response framework (SOAR) to ensure we can contain threats at machine speed, minimizing the impact of incidents on production
・Collaborate with SRE and Cloud Platform teams to embed "Security Observability" into our infrastructure, ensuring we have the visibility required for modern threat hunting
・Evaluate and select security technologies (commercial and open-source) that align with Rakuten’s scale, latency requirements, and long-term security goals
・Establish global architectural standards for logging, monitoring, and response to ensure consistency across all Rakuten business units

求める経験・スキル

Mandatory Qualifications:
・More than 10 years in IT/Security, with at least 5 years in Security Architecture, specifically focusing on SOC infrastructure or large-scale monitoring systems
・Deep expertise in architecting security for multi-cloud environments (private cloud, AWS, GCP, Azure)
・Extensive experience designing and scaling SIEM/Log Management platforms (e.g., Splunk, Chronicle, Elastic, Sentinel)
・Proven experience designing SOAR or custom automated response workflows for large-scale production environments
・Understanding of data pipelines, streaming technologies (e.g., Kafka), and the challenges of high-volume telemetry ingestion
・Exceptional ability to translate complex security architectural requirements into actionable roadmaps for engineering teams and business stakeholders
・Strong knowledge of MITRE ATT&CK, NIST, or similar frameworks as they apply to detection and response architecture

Desired Qualifications:
・Experience connecting private cloud/on-premise data centers to public cloud security monitoring architectures
・Background in software development or systems engineering; ability to "code" as part of the architectural design process
・Experience working in highly regulated, global industries (FinTech, E-commerce, Telecom)
・TOGAF, CISSP-ISSAP, or advanced cloud-architect certifications