Security Consultant, Professional Services

About this role

This Security Consultant role in Professional Services focuses on assessing and improving security for business and technical environments. Responsibilities and expected experience include conducting security assessments and security architecture reviews for networks, operating systems, and application security across on-premises and cloud environments. The consultant is also expected to think strategically about business, product, and technical issues and to present complex technical documentation to a range of business stakeholders using strong written and verbal communication.

Candidates should have practical knowledge of software engineering best practices, including source-code review, source-code management, build processes, testing, release and change management, and automation. Knowledge of the software development life cycle and agile or iterative methodologies is also required. Industry certifications such as CISSP, CISA, CISM, or CCSP are preferred.

The posting seeks implementation experience in at least one of the following areas: next-generation firewalls, web application firewalls, intrusion detection or prevention, incident response, security information and event management (SIEM), and identity and access management (IAM) controls. Experience implementing compliance frameworks including NIST, PCI-DSS, ISO/IEC 27001, ISO/IEC 27017, or FISC is also requested.

Knowledge of or experience with infrastructure as code or configuration-management technologies such as CloudFormation, Terraform, Ansible, Chef, or Puppet is required, together with scripting skills in technologies such as PowerShell, Python, Node.js, JavaScript, Bash, Ruby, or Perl. Fluent English communication and presentation ability is explicitly required. The work location is Tokyo, Japan.