Detection Engineering Tech Lead, Detection Engineering Group -Cyber Defense Operations Section (RMI Telecommunication Security Supervisory Dep)
Rakuten Mobile, Inc.18 hours ago
Ōsaka, Japan or Tokyo, JapanStaff+
Responsibilities
- Build and manage an end-to-end Detection-as-Code pipeline with peer reviews, Git version control, and reusable detection-rule repositories.
- Architect AI/LLM-based detection models and automate log onboarding, data normalization, and noise reduction.
- Lead kernel-level runtime monitoring with eBPF across Kubernetes, containerized, and Linux-based workloads.
- Conduct red-team attack simulations, validate detection coverage, and lead CTI-informed threat hunting.
- Deploy deception technologies and align detection logic with defense-in-depth architecture.
- Coordinate with DFIR, CTI, SOC, security research, threat hunting, and AI/ML teams.
- Implement guardrails protecting AI/LLM models from model poisoning, prompt injection, and adversarial manipulation.
- Integrate detection logic with SOAR playbooks for automated response.
Requirements
- 10+ years of cybersecurity experience, including at least 5+ years in detection engineering or security research.
- Deep expertise in detection pipelines, high-fidelity alert tuning, and detection-rule lifecycle management.
- Practical experience building or tuning AI, machine learning, or LLM models for anomaly detection and log analysis.
- Expert coding skills in Python, Go, or Rust and mastery of Linux, Windows, and Mac internals.
- Hands-on experience securing Kubernetes clusters, container runtimes, and microservices architectures.
- Understanding of telecommunications networks and protocols, including 5G core and signaling, plus network security and packet analysis.
- Experience with penetration testing, exploit development, or red teaming.
- Bachelor’s or Master’s degree in Computer Science, Cyber Security, or equivalent experience.
- Relevant certifications such as OSCP, GREM, GCFA, CKS, BTL2, or AI-Security credentials.
- Preferred experience with Terraform, Ansible, Crossplane, eBPF tools, open-source detection projects, and high-scale Telco, cloud-native, or FinTech environments.
- Advanced English proficiency.
Benefits
- The role is based in Tokyo or Osaka, Japan.
- Domestic and overseas business travel may be required.
- Relocation may be required.
- The role involves collaboration with security researchers, threat hunters, and AI/ML specialists.
About Rakuten Mobile, Inc.
Rakuten Mobile, Inc. is the mobile communications arm of Rakuten Group, operating as a mobile network operator in Japan. It sells consumer 4G/5G mobile plans and offers enterprise communications via a CPaaS platform spanning SMS, email, voice, messaging apps, and authentication APIs. Founded in 2019 and headquartered in Setagaya-ku, Tokyo, it runs an Open RAN, cloud-native network and launched commercial mobile service in 2020.