IT Security Engineer

Primary Responsibilities:

• Configure and uphold robust security settings across a range of IT platforms, such as Microsoft 365, Google Workspace, ClickUp, Bitbucket, and others.
• Provide direction and support to IT leaders within our group companies, aligning with headquarters’ policies.
• Monitor and assess system logs continuously for anomalies or security threats.
• Stay informed on the latest security vulnerabilities and act promptly to address any threats.
• Work collaboratively with internal departments and external partners to ensure secure and uninterrupted IT operations.
• Respond to technical queries from clients regarding our proprietary software.
• Utilize scripting or coding abilities to automate repetitive or manual processes.
• Maintain and observe performance metrics dashboards and system alerts.
• Educate team members and contribute to documentation about our IT ecosystem.
• Coordinate closely with the Japan-based Technology Department.

Qualifications and Requirements (Rewritten Version)

Essential Skills & Experience:

• Minimum 5 years of experience in IT roles with a focus on security and operations.
• Advanced proficiency in reading and writing Japanese.
• Strong interpersonal and communication skills.
• Solid working knowledge of AWS, Microsoft Azure (including Entra), and/or Google Cloud Platform.
• Competency in configuring tools like SIEM and Power BI for system monitoring and analysis.
• Experience with account lifecycle management and safeguarding sensitive data.
• Proven background in managing and responding to security-related incidents and events.

Preferred Qualifications:

• Fluency in additional languages (e.g., Korean, Chinese, Malay, Thai) to liaise with regional group entities.
• Experience formulating and executing Cyber Incident Response Plans (CIRP).
• Proficiency in vulnerability assessments, penetration testing, and incident response workflows.
• Demonstrated ability to create, implement, and maintain corporate security policies.
• Familiarity with secure network design and architecture.
• Skilled in using vulnerability scanning and threat detection tools.
• Track record of strengthening cloud infrastructure through effective policy implementation.
• Experience initiating training or awareness campaigns on social engineering and phishing prevention.
• Ability to deliver internal security education programs.
• Possession of industry-recognized certifications such as CISSP, CISM, or CEH is highly advantageous.