Security Operations Engineer (AWS)

TL;DR

Security Operations Engineer (AWS): Securing the technology stack and ensuring compliance with SOC 2 and ISO 27001 for a restaurant reservation platform with an accent on vulnerability scanning and cloud-native security. Focus on building automated security pipelines, conducting risk assessments, and hardening Kubernetes clusters.

Location: Fully Remote (Tokyo Head Quarter)

Company

Japan's leading restaurant reservation management platform.

What you will do

• Lead end-to-end implementation and maintenance of SOC 2, ISO 27001, and related compliance programs using Drata.
• Build fully automated vulnerability scanning pipelines integrated with AWS, EKS/Kubernetes, and CI/CD workflows.
• Manage security tooling for cloud-native environments, including IaC security and container runtime protection.
• Conduct risk assessments and audits aligned with NIST CSF or MITRE ATT&CK frameworks.
• Collaborate with engineering teams to remediate vulnerabilities and implement necessary security controls.

Requirements

• 3+ years in security operations.
• Proven experience achieving SOC 2 and ISO 27001 compliance (full lifecycle) is mandatory.
• Experience with Drata.
• Expertise in AWS security services (GuardDuty, Config, IAM) and Kubernetes/EKS cluster hardening.
• Proficiency in Python and Bash for automating security tasks in CI/CD pipelines.
• Hands-on experience with vulnerability management tools (e.g., Nessus, Trivy) and SIEM/XDR platforms.

Nice to have

• Experience securing containerised workloads and serverless architectures.
• Familiarity with infrastructure-as-code security practices (Terraform, CloudFormation).
• Ability to thrive in a small, agile team with minimal supervision.

Culture & Benefits

• Remote-first approach with a deep culture of documentation and asynchronous communication.
• Environment that encourages learning from mistakes and constant adaptation.
• Opportunity to work in a small, agile squad with high impact and ownership.