Security Engineering Lead, Japan Information Security Office (ISO)

About the Role The Japan Security Engineering Lead will drive security engineering efforts related to the AIG Security Stack across Japan and APAC, securing both enterprise on-premises and cloud workloads. The role requires deep expertise in cloud security architectures, vulnerability management, and network defense to protect data across multiple cloud and hybrid environments. The Lead will serve as a key technical expert for the Information Security Organization and related teams for all matters related to the AIG Security Stack in the Japan and APAC regions. What You'll Do

• Lead the deployment, management/maintenance, and Follow-the-Sun support of the AIG security stack for on-premises infrastructure and cloud offerings (AWS, Azure, GCP) to identify threats, risks, and controls.
• Serve as a trusted advisor for on-premises and cloud security, mentoring junior team members and developers on threat and risk mitigation.
• Collaborate with other information security teams to address critical security risks and ensure cloud security risks are monitored and addressed within the IT environment.
• Work with stakeholders to develop, maintain, and enforce cloud security policies and procedures.
• Partner with security architecture, cloud security engineering, remediation, and application/infrastructure teams to protect workloads and data across on-prem, cloud, and hybrid systems.
• Support the development of security policies, standards, and procedures for cloud-based applications and infrastructure using cloud security solutions. What We're Looking For
• Bachelor's degree or equivalent in Cybersecurity, IT, or related field; English fluency with intermediate Japanese.
• 3+ years in a supervisory/lead or management role; 12+ years in on-prem and cloud security with hands-on cloud experience (AWS, Azure, GCP).
• 8+ years hands-on experience with on-prem and Cloud Security Posture management solutions, including compute agents, DevOps code scanning, posture tuning, and IaC automation.
• Deep understanding of cloud/hybrid platforms (IDaaS/IaaS/SaaS/PaaS) and security tools/processes.
• Proficiency implementing security measures in cloud-native environments (Kubernetes: AKS, EKS, GKE) and Azure Functions; strong endpoint security and incident response.
• Additional certifications such as CISSP, CCSP, Security+; Azure/AWS/GCP tracks are a plus.
• Experience with vulnerability analysis and exploitation techniques; strong problem-solving and troubleshooting skills.
• Knowledge of Critical Security Controls (NIST, CIS Benchmarks, DISA STIG); familiarity with ISO 27001/27002, PCI DSS, SOX.
• Infrastructure hardening expertise for Windows and Linux; solid Windows & Active Directory and Unix/Linux knowledge; scripting in PowerShell, Python, and Linux shell.
• Strong understanding of cloud computing, virtualization, TCP/IP, and HTTP; experience with SIEM integrations (CrowdStrike NextGen SIEM preferred).
• Self-starter, team player, and ability to lead/mentor in a globally distributed team; ability to work primarily in-office. Nice to Have
• Additional cloud security certifications and hands-on experience with security frameworks.
• Experience with IAM, data protection, and cloud-native security tooling beyond the listed stack. Compensation & Benefits
• Comprehensive Total Rewards Program with benefits focused on health, wellbeing, financial security, and professional development; in-office collaboration is valued to foster teamwork and client support.