Security Specialist (Product Security)

Responsibilities and Duties

1. 1Establishment of security guardrails for AWS, Azure, and GCP environments.
2. 2In-house security consulting: Providing technical advice on security and conducting architecture reviews for our developers.
3. 3Vulnerability assessments and penetration testing: Performing or supporting security evaluations.
4. 4Vulnerability intelligence: Collecting and verifying vulnerability information, including OSINT (Open Source Intelligence).
5. 5Security tool development: Developing tools and scripts to automate or enhance security.
6. 6Framework implementation: Implementing and deploying security frameworks such as NIST CSF and CIS Controls.
7. 7DevSecOps implementation: Integrating security into modern development workflows, including K8s, Docker, and CI/CD pipelines.

About the CISO Office

1. 1Mission is to 'Maximize the value delivered to our customers through security.'
2. 2Define and create the ideal security state for the entire Money Forward Group.
3. 3Prevent service downtime and information leakage while balancing security measures with development speed.
4. 4Security principles: Embedded security in business strategy, Advanced balancing between security and experience, Autonomous and scalable organization of security.

Work Environment

1. 1Provided PC Specs: PCs equipped with the latest CPUs (MacOS or Windows). Custom-made PCs and replacements with the latest OS are possible.
2. 2Peripheral devices necessary for work (displays, mice, keyboards) can be purchased as office supplies.
3. 3Money Forward Library: Free borrowing of books, desired books can be purchased at company expense.
4. 4Referral Driven: Covers cost of recruitment meals, referral reward system.
5. 5Conference Participation Support: Company partially covers participation in domestic and international conferences.

応募資格（必須）

• Foundational understanding of computer science, including networking, operating systems, data structures, and cryptography.
• Experience in software development with at least one programming language, or hands-on experience practicing Security by Design.
• Business-level English communication skills.
• Knowledge or experience in any of the following areas: Vulnerability assessment, Penetration testing or Red Teaming operations, Forensics, malware analysis, or incident response, Cloud security, Architecture reviews, Building and operating DevSecOps workflows, Implementation and operation of security solutions (e.g., WAF, IDS/IPS, SIEM)

歓迎する経験

• Business-level Japanese communication skills.
• Experience participating in CTFs (Capture The Flag).
• Experience in bug hunting or obtaining CVEs (Common Vulnerabilities and Exposures).
• Relevant certifications such as CISSP, CISM, OSCP, GCIH, etc.
• Deep understanding of Authentication and Authorization (e.g., OIDC, OAuth).
• Experience in security-related operations within the Financial or Fintech industry (e.g., knowledge of FISC guidelines).
• Experience in AI development and/or experience in using AI tools to improve development processes.

待遇・福利厚生

• インフルエンザ予防接種
• ご近所手当
• 家賃給与控除制度
• 提携サービス優待

求めるスキル・経験