Security Engineer — Cyber Security Group — Tokyo / Nagoya / Osaka / Fukuoka

About the Cloud Security Group

The Cloud Security Group is responsible for security governance across the multi-cloud (AWS, Google Cloud, Azure) environment. We carry out our work not only within KINTO Technologies but also in collaboration with related organizations within the group.

Mission

As a specialized cloud security organization, we take responsibility for the security governance of KINTO Technologies' multi-cloud environment.

• Prevent security risks from occurring
• Continuously monitor and analyze security risks
• Respond swiftly when security risks occur

Role Overview

To achieve our mission, we carry out a wide variety of work. We identify challenges on a daily basis and define our own work to resolve them. Because the Cloud Security Group is a cross-organizational group, we carry out our activities in collaboration with many other groups.

Responsibilities

Current Core Mission

• Cloud security monitoring and improvement activities
• Threat detection and response
• Cloud environment provisioning and security configuration
• Configuration assessment and efficiency improvement
• Cloud security support for other groups

Future Initiatives

Automation and labor reduction through agent-based Ops We will convert many of our core mission activities into AI agents, automating and reducing the labor involved in work that has previously been performed by humans — such as "cloud security monitoring and improvement activities" and "threat detection and response."

Cloud security guardrails for the AI Agent era We will build and operate CDR (Cloud Detection Response) and SPM (Security Posture Management) designed with AI Agent applications (LLM, MCP, Agent) as a premise.

Driving Toyota Group projects in the cloud security domain We will carry out projects for Toyota Group companies based on our group's cloud security knowledge and know-how.

Community Activities We actively participate in community activities within the Toyota Group and in external communities, and engage in information sharing and outreach.

Requirements

Must Have

• Experience developing, building, and operating business systems using AWS, Azure, or Google Cloud (any one is acceptable)
• Project management or project leader experience
• Knowledge of security

Nice to Have

• Knowledge of cloud security frameworks such as Well-Architected Framework, CIS, or NIST
• IaC development experience using CloudFormation, Terraform, CLI, or similar
• CCoE activity experience, particularly multi-account management and policy formulation
• Experience developing, building, and operating cloud-native security services such as CSPM or CWPP
• Professional-level or specialty-level certification from a cloud vendor
• Experience launching and operating internal or external communities
• Business-level English communication skills (used for communication with group companies)
• Ability to independently drive external projects from requirements definition through to implementation

Ideal Candidate

• Someone interested in cloud security who wants to learn and practice the latest technologies
• Someone who approaches work with a positive attitude
• Someone who thinks for themselves and takes initiative
• Someone who can communicate across organizations and roles
• Someone with curiosity and a spirit of challenge toward new services and technologies
• Someone who is always committed to self-improvement

Development Environment

• PC: Windows or Mac, selected freely
• Programming languages: CloudFormation, Terraform, and others
• Platforms: AWS, Google Cloud, Azure, and others
• Tools: Docker, GitHub, JIRA, Confluence, Slack, Zoom, Teams, and others