Infrastructure Security Engineer

Overall Description：

The ideal candidate will need to spend 50-60% of their working time on security tasks and dedicate the remaining time to supporting other teams (BAU or Infrastructure).

This role will require them to report to a local security manager (a bilingual Japanese individual with a global mindset) and collaborate with global teams in the UK, India, and Singapore.

Roles & Responsibilities：

⚫Act as a facilitator (SPOC) for the security project to strengthen security posture from the HQ (including hands-on tasks and maintenance of procedure manuals).

⚫Conduct security assessments requested by the business side and formulated operational rules before release.

⚫Analyze SOC alerts, respond to tickets, check blocked URLs, and handle security-related requests.

⚫Confirm and maintain information security governance (e.g., Key IT Control), implement and follow up on IT security training, and introduce new awareness programs.

⚫Respond to security incidents, perform thorough impact analysis, implement recurrence prevention measures, and conduct targeted email drills (quarterly).

⚫Conduct security training and follow-up actions for users.

⚫Prepare and report quarterly security updates to the CFO, IT GM, and APAC leaders.

⚫Conduct information security-related reporting sessions and continuously update the BIA (Business Impact Analysis) and IAR (Information Asset Register).

⚫Conduct vulnerability assessments and penetration tests; develop the mitigation plans.

⚫Facilitate external audits (KPMG) and internal audits (HQ) every two years.