Senior Infrastructure Security Engineer
San Mateo, CA

Job Description

Rakuten Intelligence is looking for a Sr. Infrastructure Security Engineer to join our team.

The infrastructure security engineer is a key member of the security team at Rakuten Intelligence. The security engineer will be instrumental in ensuring the security of our cloud infrastructure and protection of our sensitive PII data per our information security policy. This person will help identify security gaps and drive remediation activities to close those gaps. This position plays an integral role in defining and assessing the organization's security strategy, architecture and practices as well as contributes to maturing the company's infrastructure security architecture and technology frameworks.

This position can be located in San Mateo, CA.

Responsibilities:

* Be part of security team to drive security related initiatives including but not limited to creating/maintenance of security policies, implementation of security procedures/controls, and monitoring in conformance to the policy
* Deploy and manage applications to monitor cloud infrastructure security and intrusions
* Perform initial incident triage, determine scope, urgency, and potential impact of security incidents
* Drive incident response and resolution and adjust procedures as applicable
* Provide guidance and work with the infrastructure team on security best practices around OS hardening, access logging, and patching
* Work with the global Rakuten security team to leverage their services for augmenting our security
* Work with external auditors on compliance
* Provide security guidance to Engineering teams in the company
* Perform security gap assessments and implement remediations
* Run periodic infrastructure vulnerability scans and pentests and work with engineering teams on identified vulnerabilities for resolution
* Work with the production Operations team on securing and best practices for all our AWS accounts
* Own the overall cloud infrastructure security program
* Monitors industry security updates, changes, technologies, emerging threats and best practices for continuous improvement

Requirements:

* 5+ years of experience in Infrastructure and Information Security
* Experience with OS hardening techniques for Linux environments such as SELINUX, disabling root login, sudo, password expiration, etc...
* Experience with access logging, centralized logging, and monitoring/alerting of security log events such as ELK, Splunk, AlertLogic
* Experience with applications for monitoring infrastructure security and detecting intrusions such as AlertLogic
* Working knowledge of incident response, threat modeling, and mitigation
* Working knowledge of common information security management frameworks such as ISO27001
* 5+ years working on AWS running multiple production workloads
* Experience designing and implementing access control models for privileged access in fast paced AWS cloud environment
* Knowledge of AWS security best practices and security controls using AWS services such as Cloudtrail, Guardduty, IAM, SSO, VPC, etc…
* Security related certification desirable such as CISSP, CCSP, CEH, CISM, etc...
* Strong understanding of common internet protocols such as DNS, SMTP, LDAP, etc…
* Attention to details
* Good communication and collaboration skills
* Self-motivated and strong sense of ownership of tasks
* Bachelors or Masters' degree in Computer Science or Information Security or equivalent work experience

Who We Are:

Rakuten Intelligence is fundamentally changing the precision with which online services and e-commerce companies are measured, giving our clients the critical insights they need to quickly act on industry shifts and consumer buying preferences. In fact, over 200 of the world's most well-known brands, retailers, and investors rely upon Rakuten Intelligence to make smarter business decisions.

Our Mission:

Empowering Rakuten's global community of members and merchants through amazing apps and the most robust e-commerce data.

Our Values:

* BOLD: When we go beyond what exists today or is accepted as possible, we create breakthrough products that deliver amazing benefits.
* SIMPLE: Solving hard problems is in our DNA. Eliminating complexity paves the road to clean thinking and decisive action that can move mountains.
* OPEN: Openness and transparency are critical for building trust. We are a community of curious people who are open to new ideas and fresh approaches to solving problems.
* ALL IN: When we are empowered, show up, and dig deep, our work is powerful and rewarding. We are committed, accountable, and take extreme ownership.

We offer a healthy and fun work environment:

* Excellent medical, dental & vision benefits
* Free lunch at onsite cafeteria
* Various drinks and snacks
* Commuter benefits
* Adjustable sit/standing desks
* Fun company social and volunteer events
* Onsite fitness center