My most strength is that I have insight of whole landscape in cyber security ,but also security governance and compliance.< Security Experience Summary >- Security (20 years)- Mainly Cyber Security but also Information Security and Compliance- Both Vendor side and User side< Security Solution Experience >Endpoint Security: EPP/EDRNetwork Security: NGFW, IPS/IDS, WAF, NTA/NDR, DLP and DDoS protectionAuthentication: IAM, SSO, MFA, PAM and NACZero Trust: SWG, CASB, SASE and ZTA/ZTNASecurity Operation: SIEM, SOAR and XDRCloud Security: CSPM and CWPPData Security: Data Protection, Encryption and Key ManagementOthers: Web Fraud Protection, Web Security(Proxy), Email Security, ICS/OT Security, DNS Security etc< Security Governance Experience >- Develop security policy and standard- Security risk assessment- Develop security strategy and roadmap- ISMS- Vulnerability Management- Security Incident Management- Build SOC/CSIRT- BCM/BCP- Audit- Security Awareness Training< Security Framework and Compliance >- NIST CSF and SP 800 series- MITRE ATT＆CK and Cyber Kill Chain- ISO 27001(ISMS)/27017/27018- ISMAP- PCI-DSS - SOC- APPI/GDPR< Security Basic >- Encryption- Security Architecture (Defense in depth etc)- Threat Intelligence- Cloud Security (AWS etc)- Web Application Security(OWASP Vulnerability, Secure Coding and SDLC etc)< Others >- Have full CISSP(9th edition based) knowledge- Research security incidents in Japan< Personal Strength >- Strong customer facing- Self-starter- Proactive- Ownership and professional mind- Well-Communication Skill- Good documentation and presentation skill- Curious- English: Reading and Writing(High Level) / Conversation(Middle level)