【★Corporate Security Specialist】Digital Bank Project / Hybrid / JLPT N1 Challenge Level～

★【Security Engineer】CISO Office_Tokyo | Web Security Engineer / Corporate Security Engineer

• Business Japanese REQUIRED (N1 Level)

◆ Listed Company

◆ Flextime & Hybrid Work

◆ Own Products/Services

◆ Global Business

◆ Annual salary: 8 million yen - 17 million yen

-------------【About the company】-------------

The company was established in May 2012 to solve the money issues of individuals and companies through the services, and to make users' lives more positive and forward-thinking.

Through their services, they aim to become the No. 1 "money platform" in Japan by relieving individuals of their money worries and anxieties, improving corporate management, and increasing domestic productivity.

-------------【 Job Description】-------------

【Responsibilities】

Corporate Security

Security Risk Management for Internal System/Data Analysis Environment

Establishment of security guidelines and actual controls

Establishment and implementation of systems and processes

Response to security incidents in the internal system/data analysis environment

Response and promotion of security measures for internal systems/data analysis environment and devices

Vulnerability management related to internal systems/data analysis environment

Product Security

Product Security Risk Management

From security guideline development to actual control, structure and process establishment and implementation

Product security incident response

Vulnerability management related to products

Security control of common platforms

Construction and operation of infrastructure required for incident response

【Recruitment Background】

The company develops and provides a number of money-related services, both in the toB and toC businesses. The company continues to maintain high growth rates in many of its businesses, and its main services are among the best in the country.

On the other hand, as the CEO often says, the company has yet to achieve only 1% of what it wants to do. The company hopes to deliver more and greater value to its users in the future.

So, the company is trying to hire many engineers regardless of this position and to make its development capability larger. While responding to the expansion of this organization, the company believes it is necessary to make its services even stronger and more secure, and is considering strengthening its security engineer structure in terms of both information security and cyber security.

【Technology Stack】

Web server side: Rails, Go

Web front end: React, Redux, webpack, TypeScript, Mocha, Jest

Database: MySQL (Aurora)

Infrastructure and middleware

AWS (ALB, EC2, RDS, S3, SQS, ElastiCache, EKS...) AWS (ALB, EC2, RDS, S3, SQS, ElastiCache, EKS...)

GCP (BigQuery, Firebase, GKE)

nginx, squid, memcached, kafka, logstash, filebeat, maxwell, kibana, elasticsearch,Fulentd envoy, Passenger, Puma, Unicorn, HAProxy, Docker Redis, Memcached

-------------【 Requirements】-------------

【Required】

Corporate Security

Experience in building, operating, and auditing security measures for internal systems/data analysis infrastructure

Experience in building and operating security devices (Firewall, IDS/IPS, WAF, etc.)

Experience in establishment, operation, and practice of internal systems (Active Directory, etc.)

Product Security

Security Engineer Experience

SOC Operator Experience

Web application development experience

Infrastructure Engineer Experience

【Preferred】

Corporate Security

Experience in implementation and operation of SOC1,2 and other audits

Experience in implementation and operation of security-related standards such as FISC

Experience in creating security policies and procedures

Experience in incident response, such as CSIRT

Experience in designing and operating integrated ID authentication and access authority management

Programming experience of some kind

Experience in cloud operations

Product Security

Experience in implementation and operation of SOC1,2 and other audits

Experience in implementing and operating security-related standards such as FISC

Experience in creating security policies and procedures

Experience in design and operation of incident response such as PSIRT

Experience in vulnerability assessment

Programming experience

Experience in cloud computing operations

【Langujage】

English: Basic business level (TOEIC score of 700~)

*Please ask if you have other qualifications or experience that demonstrates English language skills other than TOEIC.

*Examples: EIKEN Level 1, EIKEN Level 2 (EIKEN CSE score 1950 or above), TOEFL iBT 60 or above, IELTS 5.0 or above, Cambridge English Proficiency Test FCE, etc.

*Other qualifications and experience that demonstrate English proficiency are negotiable.

*Candidates who do not have a TOEIC score of 700 or above will be required to take a test designated by the company during the selection process. (In principle, after the first interview)

--------------------------------------------------

【Working Time 】

9:30~18:30 *Flextime System

【 Welfare 】

・Full Social Insurance

・Commuting Allowance

・Defined Contribution Pension

・Employee Shareholding System

・Medical Checkup

・Training/Self Development Allowance

・Housing allowance for the neighborhood and celebration for moving to the neighborhood

・Influenza vaccination

・Subsidy for purchasing books

・Preferential treatment when using the following services (*limited to the company's contracted businesses)

- Rental brokerage

- Housekeeping service

- Babysitting

- Online English conversation school

【 Holiday 】

• Saturday/Sunday/National Holiday
• Annual Paid Leave
• New Year Holiday
• Summer Holiday
• Winter Holiday, etc

-------------------------------------------------------------------------