Security Specialist - Product Security

Responsibilities and Duties

1. 1Establishing security guardrails for cloud environments
2. 2In-house security consulting: Providing technical advice on security to in-house developers, architecture reviews, etc.
3. 3Development of security-related tools and scripts
4. 4Implementation and deployment of frameworks such as NIST CSF, CIS Controls
5. 5Implementation of DevSecOps, including K8s, Docker, CI/CD

Attractions of This Position

1. 1A highly challenging environment as a security specialist, creating a new digital bank from scratch in collaboration with Sumitomo Mitsui Financial Group and Sumitomo Mitsui Banking Corporation
2. 2An opportunity to leverage your experience and expertise in a business that has no precedent in impacting the world
3. 3A role that offers significant responsibility and a sense of accomplishment, as you will not only plan and design security measures but also consider and execute the cybersecurity strategy of the new company yourself.

Work Environment

1. 1Provided PC Specs: We provide PCs equipped with the latest CPUs (MacOS or Windows). Custom-made PCs tailored to business requirements and replacements with the latest OS are also possible.
2. 2Money Forward Library: We have a library system where you can freely borrow books, ranging from technical books to management books. Desired books can be purchased at the company's expense.
3. 3Referral Driven: We cover the cost of recruitment meals. There is a referral reward system.
4. 4Conference Participation Support: The company partially covers participation in domestic and international conferences, such as RubyKaigi and Google I/O.

応募資格（必須）

• Basic understanding of computer science, including networks, OS, data structures, cryptographic theory
• Development experience in any programming language or practical experience in security-by-design
• Knowledge or experience in any of the following: Vulnerability assessment, Cloud security, Experience in building and operating DevSecOps, Experience in building and operating security solutions such as WAF, IDS/IPS, SIEM

歓迎する経験

• Experience in CTF
• Experience in bug hunting, obtaining CVEs
• Certifications such as CISSP, CISM, OSCP, GCIH
• Deep understanding of authentication and authorization, OIDC, OAuth
• Experience in security-related work in the financial or Fintech industry, such as FISC
• Experience in AI development and/or experience in using AI tools to improve development processes

待遇・福利厚生

• インフルエンザ予防接種
• ご近所手当
• 家賃給与控除制度
• 提携サービス優待

求めるスキル・経験