Senior Specialist, Cloud Security

Rakuten Symphony; Bengaluru; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Rakuten Symphony in Bangalore is seeking a hands-on Senior Cloud Security Engineer to support security engineering and security operations for applications, cloud infrastructure, networks, and on‑prem environments.

The role involves implementing and operating security controls, configuring firewalls and WAFs, monitoring security events, investigating incidents, managing vulnerabilities, and improving the production security posture. AWS and GCP security services are preferred.

Qualifications

• 5–8 years of experience in security engineering or security operations.
• Hands-on experience in security monitoring, incident investigation, vulnerability management, system hardening, and control implementation.
• Experience configuring and managing firewalls, WAFs, F5, Cisco technologies, IAM, and monitoring tools.
• Experience with AWS or GCP security services is preferred.
• Proficiency with Kubernetes, Docker, containers, and container security.

Responsibilities

• Implement, operate, and improve security controls for applications, cloud infra, servers, networks, and platforms.
• Configure and manage security technologies including firewalls, WAFs, F5, Cisco security solutions and network controls.
• Maintain AWS WAF, GCP Cloud Armor, F5 Advanced WAF, and related technologies.
• Troubleshoot F5 BIG-IP security features and VPN, TLS controls, and traffic management.
• Investigate security alerts, suspicious traffic, and potential compromises; support incident response and remediation.

Skills

Security monitoring

Incident investigation

Vulnerability management

Firewall configuration

WAF configuration

F5 BIG-IP

Cisco security

Kubernetes

Docker

Cloud security (AWS/GCP)

Tools

AWS WAF

GCP Cloud Armor

Terraform

SIEM

Job description

Job Description:

JobTitle: SeniorCloudSecurityEngineer

Department: SecurityEngineering

Function: SecurityEngineeringandOperations

ReportsTo: Manager

Location: Bangalore,India

JobDescription

RakutenSymphonyisseekingahands-onSeniorCloudSecurityEngineertosupportsecurityengineeringandsecurityoperationsforapplications,cloudinfrastructure,networkplatforms,andon-premisesenvironments.Therolewillberesponsibleforimplementingandoperatingsecuritycontrols,configuringfirewallsandWAFs,monitoringsecurityevents,investigatingincidents,managingvulnerabilities,andimprovingthesecuritypostureofproductionenvironments.ExperiencewithAWSandGCPsecurityservicesispreferred.

KeyResponsibilities

• Implement,operate,andcontinuouslyimprovesecuritycontrolsforapplications,cloudinfrastructure,servers,networks,andplatforms.
• Configureandmanagesecuritytechnologiesincludingfirewalls,WAFs,F5securitysolutions,Ciscosecuritysolutions,networkaccesscontrols,andtraffic-filteringpolicies.
• ConfigureandmaintainAWSWAF,GCPCloudArmor,F5AdvancedWAF,andequivalenttechnologies.
• ConfigureandtroubleshootF5BIG-IPsecurityfeatures,includingvirtualservers,accesspolicies,SSL/TLScontrols,trafficmanagement,andWAFpolicies.
• ConfigureandmanagerelevantCiscosecuritytechnologies,includingfirewalls,networksecuritycontrols,VPNs,accesspolicies,andsecuritymonitoring.
• DevelopandtunesecurityrulestoprotectapplicationsandAPIsfromSQLinjection,cross-sitescripting,pathtraversal,botactivity,denial-of-serviceattacks,andothermalicioustraffic.
• Monitorfirewall,WAF,F5,Cisco,operatingsystem,application,network,cloud,andsecuritylogs.
• Investigatesecurityalerts,suspicioustraffic,unauthorizedaccess,abnormalapplicationbehavior,andpotentialindicatorsofcompromise.
• Supportsecurityincidentresponse,includinganalysis,containment,recovery,andpost-incidentimprovement.
• Investigatecompromisedaccounts,serviceaccounts,cloudcredentials,servers,containers,andapplicationworkloads.
• Implementandreviewidentityandaccessmanagementcontrolsacrosscloud,network,Linux,andapplicationenvironments.
• PerformsecurityhardeningandvulnerabilityremediationforLinuxservers,virtualmachines,containers,Kubernetesplatforms,andcloudworkloads.
• Supportthesecureoperationofon-premisesKubernetesandmanagedcloudKubernetesenvironments.
• ReviewKubernetesconfigurations,workloadpermissions,ingresscontrols,secrets,containerimages,andexposedservices.
• Performsecurityposturereviewsandtrackremediationofidentifiedweaknesses.
• Analyzefindingsfromvulnerabilityscanners,security-monitoringtools,cloudsecuritytools,penetrationtests,andconfigurationreviews.
• Developscriptsandautomationtosupportsecuritymonitoring,investigation,alerthandling,ruledeployment,andsecurityvalidation.
• SupportintegrationwithSIEM,vulnerability-management,endpoint-security,andincident-responseplatforms.
• Participateinthreatmodelling,securityarchitecturereviews,riskassessments,andsecuritydesignreviews.
• Reviewapplicationandinfrastructurechangestoensureappropriatesecuritycontrolsareimplementedbeforedeployment.
• Workwithapplication,DevOps,SRE,platform,network,infrastructure,andSOCteamstoaddresssecurityrisks.
• Maintainsecurityprocedures,incident-responseplaybooks,technicalstandards,andoperationaldocumentation.
• Supportsecurityaudits,complianceactivities,evidencecollection,andcontinuousimprovementinitiatives.

RequiredSkillsandExperience

• 5–8yearsofexperienceinsecurityengineering,securityoperations,networksecurity,infrastructuresecurity,orcybersecurity.
• Stronghands-onexperienceinsecuritymonitoring,incidentinvestigation,vulnerabilitymanagement,systemhardening,andsecuritycontrolimplementation.
• Experienceconfiguringandmanagingfirewalls,WAFs,F5,Ciscosecuritytechnologies,IAM,networkcontrols,logging,andmonitoringtools.
• ExperiencewithAWSorGCPsecurityservicesispreferred.
• PracticalexperiencewithAWSWAF,AWSIAM,securitygroups,CloudTrail,GuardDuty,orequivalentAWSservices.
• ExperiencewithGCPCloudArmor,GCPIAM,VPCfirewallrules,CloudAuditLogs,orequivalentGCPservicesispreferred.
• Hands-onexperiencewithF5BIG-IP,F5AdvancedWAF,Ciscofirewalls,CiscoVPN,orrelatedsecuritytechnologies.
• GoodknowledgeofLinuxsecurity,hardening,patching,accesscontrol,andtroubleshooting.
• ExperiencewithKubernetes,Docker,containers,andcontainersecurity.
• GoodunderstandingofHTTP/HTTPS,TLS,DNS,TCP/IP,routing,loadbalancers,reverseproxies,andnetworksegmentation.
• Experienceanalyzingsecuritylogsandinvestigatingsuspiciousevents.
• Understandingofcommonattacks,includingcredentialcompromise,privilegeescalation,malware,APIabuse,SQLinjection,cross-sitescripting,SSRF,dataexfiltration,anddenial-of-serviceattacks.
• ExperiencewithPython,Bash,PowerShell,orsimilarscriptinglanguages.
• ExperiencewithSIEM,vulnerability-management,endpoint-security,orsecurity-monitoringplatforms.
• ExperiencewithTerraformorsimilarinfrastructuredeploymenttools.
• Strongproblem-solving,incident-handling,communication,anddocumentationskills.

PreferredQualifications

• AWSCertifiedSecurityorequivalentcertification.
• GoogleProfessionalCloudSecurityEngineercertification.
• F5orCiscosecuritycertification.
• CISSP,CCSP,orequivalentsecuritycertification.
• Experiencesecuringon-premisesKubernetes,AmazonEKS,orGoogleKubernetesEngine.
• ExperiencewithDevSecOps,CI/CDsecurity,APIsecurity,andcloud-nativesecurity.
• Experiencewithpenetrationtesting,threathunting,oradversarysimulation.
• Experienceintelecom,distributedsystems,microservices,orhighlyavailableproductionenvironments.

RoleSummary

Responsibleforsecurityengineeringandsecurityoperationsacrossapplications,infrastructure,Linux,Kubernetes,andcloudenvironments,includingsecuritymonitoring,incidentresponse,firewalls,WAF,IAM,vulnerabilitymanagement,hardening,andsecurityautomation.ExperiencewithAWSandGCPsecurityservicesispreferred.

RAKUTENSHUGIPRINCIPLES:

OurworldwidepracticesdescribespecificbehavioursthatmakeRakutenuniqueandunitedacrosstheworld.WeexpectRakutenemployeestomodelthese5ShugiPrinciplesofSuccess.

• Alwaysimprove,alwaysadvance. Onlybesatisfiedwithcompletesuccess-Kaizen.
• Bepassionatelyprofessional. Takeanuncompromisingapproachtoyourworkandbedeterminedtobethebest.
• Hypothesize-Practice-Validate-Shikumika. UsetheRakutenCycletosuccessinunknownterritory.
• MaximizeCustomerSatisfaction. Thegreatestsatisfactionforworkersinaserviceindustryistoseetheircustomerssmile.
• Speed!!Speed!!Speed!! Alwaysbeconsciousoftime.Takecharge,setcleargoals,andengageyourteam.