Role overview

Qualifications

3+ years in security operations with proven experience achieving SOC 2 or ISO 27001 compliance (full lifecycle)
Experience with Drata
Expertise in AWS security services (GuardDuty, Config, IAM) and Kubernetes/EKS cluster hardening
Proficiency in scripting (Python, Bash) for automating security tasks in CI/CD pipelines

Responsibilities

Lead end-to-end implementation and maintenance of SOC 2, ISO 27001, and related compliance programs through our key partner (Drata)
Build fully automated vulnerability scanning pipelines integrated with AWS, EKS/Kubernetes, and CI/CD workflows
Manage security tooling for cloud-native environments (e.g., IaC security, container runtime protection)
Conduct risk assessments and audits, aligning with NIST CSF or MITRE ATTCK frameworks

Key facts

Remote from: Japan
Full time
Mid-level (2-5 years)
Security Engineer
English

Hard skills

Amazon Web Services Kubernetes Operations Security Drayage Scripting Vulnerability Management Incident Response Container Security Infrastructure as Code (IaC) Terraform AWS CloudFormation Internal Documentation

Other skills

Communication
Collaboration

About the company

TableCheck

TableCheck empowers worldwide hospitality. Our restaurant booking and guest experience platform helps restaurants and hospitality operators drive long-term success for their businesses. Today, we are proudly serving more than 9000+ clients in over 35 countries including 280+ Michelin-starred restaurants.Founded in 2011, our company has now become the standard solution for restaurants and hospitality businesses around the world to drive guest loyalty and revenue. Our roster of global clients includes Hilton Hotels & Resorts, Intercontinental Hotels & Resorts, Minor Hotels Hyatt, Andaz, Fogo, Pizza 4P's, Tony Roma's, Bills and etc.Whether it is a large-scale hotel, an enterprise, or a small-scale restaurant, we have all the right tools to help bring their business to the next level. Email: info@tablecheck.com

Company details

Company typeSME

Company size51 - 200

Links

Website LinkedIn See all jobs

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

Security Operations Engineer

TableCheck, Japan's leading restaurant reservation management platform, is seeking a Security Operations Engineer. As a member of our Site Security squad as part of the Site Reliability Engineering team you will provide a key supporting role, securing the technology stack and help support our demanding business and developer needs.

We run a robust and fault-tolerant infrastructure built on Amazon Web Services (AWS)
TableCheck has embraced remote work. As such, communication and documentation are in our blood. We look for and write about signals in the noise which enables us to constantly learn from mistakes and adapt, and we expect members of our teams to constantly follow up with questions and updates to keep everyone in the loop.

Key Responsibilities:

Lead end-to-end implementation and maintenance of SOC 2, ISO 27001, and related compliance programs through our key partner (Drata).
Build fully automated vulnerability scanning pipelines integrated with AWS, EKS/Kubernetes, and CI/CD workflows.
Manage security tooling for cloud-native environments (e.g., IaC security, container runtime protection).
Conduct risk assessments and audits, aligning with NIST CSF or MITRE ATT&CK frameworks.
Collaborate with engineering teams to remediate vulnerabilities and implement security controls.

Required Skills:

3+ years in security operations with proven experience achieving SOC 2 or ISO 27001 compliance (full lifecycle).
We are only looking for SecOps engineers with SOC 2 and ISO 27001 compliance experience.
Experience with Drata.
Expertise in AWS security services (GuardDuty, Config, IAM) and Kubernetes/EKS cluster hardening.
Proficiency in scripting (Python, Bash) for automating security tasks in CI/CD pipelines.
Hands-on experience with vulnerability management tools (e.g., Nessus, Trivy) and SIEM/XDR platforms.
Strong knowledge of industry-standard frameworks for incident response and cloud security.

Preferred Qualifications:

Experience securing containerised workloads and serverless architectures.
Familiarity with infrastructure-as-code (Terraform, CloudFormation) security practices.
Ability to thrive in a small, agile team (2 members) with minimal supervision.