Staff Engineer, Security Operations Center

Rakuten Asia Pte Ltd; Bengaluru; Presencial; INR 1 500 000 - 2 300 000; Tempo integral

Resumo da oferta

Rakuten Asia Pte Ltd in Bengaluru, India is seeking a highly technical SOC Analyst (L2) to help transform our Security Operations Center. You will leverage AI-driven security tools and LLMs to detect, analyze, and neutralize advanced threats while maturing our incident response capabilities.

The role requires deep knowledge of SIEM/SOAR, Linux, container security (Docker, Kubernetes), and automation using Python or Go.

Qualificações

• Bachelor’s degree in Computer Science, Cyber Security, or equivalent.
• 5–8 years in a SOC, incident response, or security engineering role.
• Strong understanding of SIEM/SOAR ecosystems for AI-driven detection.
• Relevant certifications (e.g., GCIH, GCSA, CKAD, CKS, or AI-Security).

Responsabilidades

• AI-Driven Threat Defense using LLMs and AI platforms for threat hunting and triage.
• Contribute to SOC capability roadmap and improve tools/processes.
• Secure containers and Kubernetes clusters, defending against container exploits.
• Develop playbooks and SOPs; upskill the SOC team.
• Lead incidents; identify gaps and propose architectural hardening.
• Tune detection logic and integrate AI feedback loops into SIEM/SOAR.
• Offensive security research to test defenses against AI-powered tools.

Conhecimentos

SIEM/SOAR

Linux

Kubernetes security

Python/Go

Threat hunting

Incident response

AI/LLM security

Communication

Formação académica

Bachelor’s degree in Computer Science, Cyber Security, or equivalent

Ferramentas

Docker

Kubernetes

SIEM/SOAR

Descrição da oferta de emprego

Job Title: SOC Analyst (L2) Department: Cyber Defense Operations Reports To: Senior Manager, Cyber Defense Operations Section Location: Bangalore, India

About the Team/Department: You will be at the forefront of the most significant shift in cyber defense history. We offer a platform for you to innovate, experiment with AI, and build a world-class security capability that protects critical infrastructure. If you are a creative, hands-on leader who thrives on solving the impossible problems of the AI-attack era, we want to hear from you.

Position Summary We are seeking a highly technical and innovative SOC Analyst (L2) to serve as a key architect of our future-ready Security Operations Center. In this role, you will go beyond traditional monitoring; you will actively participate in the transformation of our SOC to counter autonomous, AI-driven cyber threats. You will leverage LLMs and AI-powered security tools to detect, analyze, and neutralize advanced adversaries. Reporting to the SOC Lead, you will be a hands-on contributor to our capacity development, refining our defenses to ensure we remain resilient against the next generation of machine-speed attacks.

Key Responsibilities

• AI-Driven Threat Defense: Utilize LLMs and AI-augmented security platforms to accelerate threat hunting, incident triage, and forensic analysis. Develop workflows to identify and respond to autonomous AI-based attacks.
• SOC Transformation & Enhancement: Actively contribute to the SOC’s capability roadmap. Recommend and implement structural improvements to our toolsets and processes to ensure we are equipped to handle the evolving threat landscape.
• Container & K8s Security Operations: Perform deep-dive analysis into containerized environments and Kubernetes clusters. Implement security controls that defend against container-specific exploits and automated lateral movement.
• Capacity Development: Participate in the continuous training and upskilling of the SOC team. Translate your technical findings into new playbooks and SOPs that elevate the entire team's response maturity.
• Advanced Incident Response: Lead the investigation of complex incidents. Use your understanding of "Defense in Depth" to identify gaps in our environment and propose architectural hardening.
• Security Engineering: Collaborate with the L3 Manager to tune detection logic and integrate AI-based feedback loops into our SIEM/SOAR infrastructure.
• Offensive Security Research: Apply an "OffSec" mindset to simulate and test our defenses against AI-powered attack tools, ensuring our response is faster and more precise than the adversary.

Required Qualifications

• Bachelor’s degree in Computer Science, Cyber Security, or equivalent.
• 5 - 8 years of experience in a SOC, incident response, or security engineering role.
• Strong understanding of SIEM/SOAR ecosystems and how to optimize them for AI- driven detection.
• Relevant certifications (e.g., GCIH, GCSA, CKAD, CKS, or AI-Security specific certifications)

Preferred Qualifications

• Experience in the Telecommunications sector (e.g., understanding of 5G security, NFV, and signaling protocols).
• Experience in developing custom AI/ML models or fine-tuning LLMs for specific security use cases.
• Demonstrable experience in "Red Teaming" or participating in high-level CTF competitions.
• Experience with Infrastructure as Code (IaC) and DevSecOps pipelines.

Core Competencies

• AI & LLM Proficiency: Practical experience in using LLMs for security tasks (e.g., code analysis, log interpretation, playbook automation, or threat intelligence summarization).
• Technical Depth: Expert-level knowledge of Linux, containerization (Docker), and Kubernetes (K8s) security.
• Analytical & Investigative Skills: Strong ability to perform root-cause analysis on complex, non-signature-based attacks.
• Security Architecture: A firm understanding of defense-in-depth principles and how to apply them to modern, distributed network architectures.
• Automation Mindset: Proven ability to automate manual tasks using Python, Go, or Bash.
• Communication: Exceptional written and verbal communication skills, with the ability to articulate technical security threats to both technical and non-technical stakeholders.

You must be comfortable building "security-as-code" solutions.

undefined

RAKUTEN SHUGI PRINCIPLES

Our worldwide practices describe specific behaviours that make Rakuten unique and united across the world. We expect Rakuten employees to model these 5 Shugi Principles of Success. Always improve, always advance. Only be satisfied with complete success - Kaizen. Be passionately professional. Take an uncompromising approach to your work and be determined to be the best. Hypothesize - Practice - Validate - Shikumika. Use the Rakuten Cycle to success in unknown territory. Maximize Customer Satisfaction. The greatest satisfaction for workers in a service industry is to see their customers smile. Speed!! Speed!! Speed!! Always be conscious of time. Take charge, set clear goals, and engage your team.

undefined undefined

Rakuten Symphony

Rakuten Symphony is reimagining telecom, changing supply chain norms and disrupting outmoded thinking that threatens the industry’s pursuit of rapid innovation and growth. Based on proven modern infrastructure practices, its open interface platforms make it possible to launch and operate advanced mobile services in a fraction of the time and cost of conventional approaches, with no compromise to network quality or security. Rakuten Symphony has operations in Japan, the United States, Singapore, India, South Korea, Europe, and the Middle East Africa region. For more information, visit: https://symphony.rakuten.com Building on the technology Rakuten used to launch Japan’s newest mobile network, we are taking our mobile offering global. To support our ambitions to provide an innovative cloud-native telco platform for our customers, Rakuten Symphony is looking to recruit and develop top talent from around the globe. We are looking for individuals to join our team across all functional areas of our business - from sales to engineering, support functions to product development.

Let’s build the future of mobile telecommunications together!