This is a fully remote position, open to applicants in Japan.

📋 Description

• Oversee the complete implementation and ongoing management of SOC 2, ISO 27001, and associated compliance initiatives in collaboration with our primary partner (Drata).

• Develop fully automated vulnerability scanning processes that are integrated with AWS, EKS/Kubernetes, and CI/CD workflows.

• Administer security tools for cloud-native environments (e.g., Infrastructure as Code (IaC) security, container runtime protection).

• Perform risk assessments and audits, ensuring alignment with NIST CSF or MITRE ATT&CK frameworks.

• Work closely with engineering teams to address vulnerabilities and establish security controls.

⛳️ Requirements

• A minimum of 3 years of experience in security operations, with a demonstrated track record of achieving SOC 2 or ISO 27001 compliance (full lifecycle).

• Familiarity with Drata.

• In-depth knowledge of AWS security services (GuardDuty, Config, IAM) and hardening of Kubernetes/EKS clusters.

• Proficient in scripting (Python, Bash) to automate security tasks within CI/CD pipelines.

• Practical experience with vulnerability management tools (e.g., Nessus, Trivy) and SIEM/XDR platforms.

• Strong understanding of industry-standard frameworks regarding incident response and cloud security.