As a Senior Security Analyst on the Information Security Trust team, you will support the implementation of a continuously evolving governance, risk, and compliance program (GRC) supporting our enterprise and products. In this role, you will help establish a strong program for security by setting security policy and standards in alignment with applicable industry frameworks, ensure that groups across the company are aware of and adhere to security requirements, assess risk posture of systems and environments, work with teams throughout the organization to ensure control requirements are implemented in accordance with security policies and standards, oversee control assessments from external assessors, and continuous monitor programs to ensure controls are healthy and any gaps are addressed.

This role is based Tokyo Japan. Appian was built on a culture of in-person collaboration, which we believe is a key driver of our mission to be the best. Employees hired for this position are expected to be in the office 5 days a week to foster that culture and ensure we continue to thrive through shared ideas and teamwork. We believe being in the office provides more opportunities to come together and celebrate working with the exceptional people across Appian. 

This role will require you to be fluent in both English and Japanese and familiarity in working with companies based in Japan.

To be successful in this role, you need: 

• To be ambitious, detail oriented, and to work to impact, not completion
• Excellent problem solving skills and the ability to dissent constructively and find resolution while showing respect towards others
• Ability to make sound, situationally aware decisions
• Ability to communicate effectively verbal and written communication skills, and ability to effectively provide security subject matter expertise across all levels of Appian information security concepts and requirements to personnel of varying technical backgrounds and positions 
• Ability to track work accurately and handle multiple work streams simultaneously, while meeting aggressive deadlines and delivering impactful products
• Ability to execute on established roadmaps
• Ability to work as a team to accomplish shared goals
• A passion for security and technology
• Strong understanding and knowledge of security frameworks (e.g. ISMAP, IRAP, ISO 27001, etc.)
• Strong understanding and knowledge of relevant technologies such as: cloud-based SaaS / PaaS software delivery models and underlying IaaS (e.g. AWS, Azure, GCP), modern cloud native technologies (e.g. Kubernetes, Docker, serverless), operating systems (e.g. Windows, UNIX, Linux), cryptography
• Ability to evaluate environments, architectures, plans against compliance requirements to identify gaps, and to work collaboratively with teams responsible for implementing controls to provide guidance and oversight on how best to meet compliance requirements
• Ability to work independently

Basic qualifications:

• Fluency in both English and Japanese
• B.S./B.A. or greater in related field of study and / or relevant certifications (e.g. CISSP, CISA, CISM)
• 5+ years of experience in security compliance / governance, risk management, information assurance, or other related field

Appian’s Information Security department is currently seeking a Senior IT Engineer eager to be hands-on and involved in many different areas of  responsibility. . As a Senior IT Engineer, you’ll also collaborate with infrastructure technology peers and handle business solutions for the company’s network infrastructure. The ideal candidate should have a track record of using a diverse set of technologies to achieve business goals.

Required Experience:

• 6 - 9 years In-depth understanding of networking protocols, technologies, and concepts (TCP/IP, VLANs, routing, switching, subnetting, etc.)

• Experience designing, implementing and maintaining wireless infrastructure. Troubleshooting wireless related issues, optimizing coverage, capacity and wireless performance. 

• Strong knowledge and hands-on experience with RADIUS, IDPs (e.g., SAML, OAuth, OpenID Connect), LDAP, and other AAA-related protocols and systems.

• Understanding of security principles, including multifactor authentication (MFA), encryption, and vulnerability management.

• You have experience with scripting and automation tools that manage network and infrastructure configuration changes (preferably using source control)l. Automating your way out of a repetitive task is second nature. Familiarity with languages such as Python and IaC or infrastructure automation systems such as Ansible and Terraform are a significant plus.

• Experience with network monitoring and troubleshooting tools.

• You have an ability to approach problems from unconventional angles, offering unique perspectives

• You have a forward-thinking mindset, forecasting potential problems and following developing technological trends

• A BS in Computer Science or related field/degree or equivalent experience

Responsibilities:

• Plan and lead LAN, WAN, network security, and systems projects across diverse technology platforms including multi-vendor wired (enterprise switches, routers and firewalls) and wireless networks, VPNs, VOIP, etc across a hybrid global infrastructure footprint.

• Internal certificate and certificate authority management. Configuring and managing radius server in a High Availability (HA) environment

• Designing and implementing global wireless Infrastructure. Managing and maintaining tools to enhance wireless performance

• Managing, implementing, and integrating RADIUS, IDPs, LDAP, and other AAA-related protocols and systems.

• Leverage both cloud (AWS, Azure, GCP) and physical network/compute infrastructure to find creative solutions to complex problems

• Automate cloud infrastructure deployment and management using Infrastructure as Code (e.g. Terraform, CloudFormation) and scalable automation tools such as Ansible

• Respond to and resolve emergent problems across our diverse enterprise systems, from the physical layer to the application layer

• Utilize best practices based on various frameworks (e.g. ITIL, ISO, SOC, PCI) and support internal and external audit activities

• You’ll use the know-how and discerning standards you’ve acquired over years of experience to recommend emerging technologies to keep our network modern, innovative, and secure

• Collaborate with teams of fellow tech gurus and play an integral part of network and systems design, architecture and administration

The Appian Information Security team continuously evaluates the evolving threat landscape across Appian’s operations and service offerings. We are seeking an Information Security Application Engineer to support security engineering initiatives through application development, automation, and data-driven analysis.

This role is ideal for someone who is excited to build software and systems that improve Appian’s security posture. You will work closely with Information Security, Engineering, and Platform teams to design and implement applications, tools, and processes that enhance detection, monitoring, and secure development practices across the organization.

This role is based at our Headquarters in McLean, Virginia. Appian was built on a culture of in-person collaboration, which we believe is a key driver of our mission to be the best. Employees hired for this position are expected to be in the office 5 days a week to foster that culture and ensure we continue to thrive through shared ideas and teamwork. We believe being in the office provides more opportunities to come together and celebrate working with the exceptional people across Appian.

What You’ll Do

• Design, build, and maintain applications and tools that support Appian’s Information Security and Product Security programs
• Develop security-focused solutions using the Appian Platform and other internal frameworks
• Assist in the design and implementation of security tooling for scanning, testing, monitoring, and reporting
• Analyze large volumes of security-related data to identify trends, anomalies, and potential threats
• Support vulnerability management efforts, including triage, validation, and remediation tracking
• Participate in security research and present findings to senior engineers and security leadership
• Assist with secure design and implementation of internal and product-facing security features
• Collaborate with engineering teams to integrate security best practices into the software development lifecycle
• Contribute to automation and improvements across Appian’s DevSecOps tooling and workflows
• Help document security processes, standards, and technical findings for internal use
• The ability to build and improve systems that help Information Security teams respond to modern threats

Basic Qualifications

• Pursuing a Bachelor’s degree in Computer Science, Engineering, or a related field
• Programming or scripting experience in one or more languages (e.g., Java, Python, C/C++)
• Understanding of network fundamentals and internet protocols (TCP/IP, DNS, DHCP, HTTP/S)
• Familiarity with Windows and Linux/Unix environments
• Exposure to cloud-based infrastructures (SaaS, PaaS, IaaS)
• An interest in application development with a security mindset

Preferred Qualifications

• Experience building applications or automations as part of coursework, internships, or personal projects
• Familiarity with APIs and integrating systems
• Interest in secure software development, threat modeling, or vulnerability management
• Exposure to data analysis or working with large datasets
• Awareness of common security concepts such as authentication, authorization, encryption, and secure coding practices