Japan Information Security Office (ISO) Security Engineering Lead (Cybersecurity)

Location: Sumida-ku, Japan; primarily office-based

Company

hirify.global is a global provider of commercial and personal insurance solutions and property casualty insurance services.

What you will do

• Lead deployment, management, maintenance, and Follow the Sun support for the hirify.global Security Stack across on-premise and cloud environments.
• Secure workloads and data across AWS, Microsoft Azure, Google Cloud Platform, and hybrid systems by identifying threats, risks, and controls.
• Advise information security, application, infrastructure, and cloud engineering teams on risk mitigation and security architecture.
• Develop, maintain, and enforce cloud security policies, standards, and procedures.
• Collaborate with security architecture, remediation, and other information security teams to address critical business risks.
• Mentor junior team members and developers and troubleshoot security product, performance, and release-blocking issues.

Requirements

• Bachelor’s degree or equivalent experience in cybersecurity, information technology, computer science, or a related field.
• Fluent English and intermediate Japanese for email, reading materials, and meetings with local counterparts.
• At least 3 years of supervisory, lead, or management experience and 12+ years in on-premise and cloud security.
• 8+ years of hands-on experience with cloud security posture management, compute agents, DevOps code scanning, policy tuning, and IaC automation.
• Strong knowledge of cloud and hybrid platforms, Kubernetes, Azure Functions, endpoint security, incident response, SIEM integrations, Windows, Linux, Active Directory, TCP/IP, and HTTP.
• Experience with vulnerability analysis, exploitation techniques, infrastructure hardening, NIST, CIS Benchmarks, DISA STIG, ISO 27001/27002, PCI DSS, and SOX.

Nice to have

• CISSP, CCSP, Security+, or foundational, associate, or security certifications for Azure, AWS, or GCP.
• Experience with CrowdStrike NextGen SIEM.
• Scripting skills in PowerShell, Python, and Linux shell.

Culture & Benefits

• Primarily office-based collaboration to support close work with colleagues and clients.
• Total Rewards benefits covering health, wellbeing, financial security, and professional development.
• Continuous learning and development opportunities.
• Inclusive culture supported by cultural awareness activities and Employee Resource Groups.