Vice President, Concierge Security at Arctic Wolf transforming cybersecurity concierge services using AI and operational excellence. Strategic role focusing on customer engagement, operational excellence, and team leadership.
About the role
- Security Engineer ensuring Mercari products meet security standards and assisting with security issues in Tokyo. Involved in threat modeling, security testing, and system vulnerabilities.
Responsibilities
- Review product designs to define necessary security requirements based on threat modeling.
- Review proposed architectures and propose a set of security controls in order to minimize risk.
- Review source code to find security problems and potential vulnerabilities.
- Conduct vulnerability assessments and penetration testing on Mercari’s Backend, Web, iOS, and Android applications.
- Automate security checks and tests so that they can be easily and transparently plugged into the CI/CD pipeline.
- Develop technical solutions to help mitigate security vulnerabilities.
- Maintain technical and security standards for Web and mobile application technologies.
- Educate developers on secure coding practices with workshops, talks, and lessons.
- Evaluate and investigate suspected security events or incidents and perform remediation in accordance with Incident Response procedures.
- Collaborate with information security officers, the legal team, and internal auditors on technical security matters.
Requirements
- Bachelor's degree or equivalent practical experience.
- Programming experience with one or more programming languages including but not limited to: Go, PHP, Java, Ruby, Python, Swift, Kotlin, or JavaScript.
- 4+ years of experience analyzing the security of systems (penetration testing, Web application security testing, vulnerability scanning, threat modeling, etc.).
- Good understanding of modern Web application architecture, TLS, HTTP, TCP/IP, and standard network and system security technologies.
- Experience with modern software development tools, such as distributed version control systems (git), dependency management, build systems, and CI/CD pipelines.
- Strong teamwork skills in a diverse environment.
- Effective interpersonal and communication skills.
- In-depth technical knowledge of security engineering, computer and network security, Unix-based operating systems, mobile security, authentication, security protocols, and applied cryptography.
- Strong experience in securing both backend (Go, PHP) and frontend (Web, JavaScript, iOS, Android) applications with the ability to adopt new frameworks and technologies quickly.
- Good understanding of development methodologies such as Object-oriented Programming (OOP), Domain-driven Design (DDD), and Test-driven Development (TDD).
- Good understanding of microservice architecture and related security patterns.
- Good understanding of the inner workings of OAuth2 and OIDC implementations.
- Knowledge of container and orchestration technology like Docker and Kubernetes.
- Experience working with large-scale cloud infrastructure and services (GCP or AWS).
- Experience with securing large-scale cloud infrastructure through analyzing CSPM alerts from tools such as Wiz.
- Experience working in an agile and DevOps-centric environment.
- Japanese: Ideal but not required
- English: Independent (CEFR-B2)
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Cybersecurity Consultant focused on defining and evolving security controls for diverse technology environments. Collaborating on secure architectures and assessing system configurations in cloud settings.
Automotive Cybersecurity Specialist responsible for analyzing cybersecurity requirements and ensuring secure systems. Collaborating across teams to develop cybersecurity strategies and technical implementations.
Information System Security Officer responsible for cybersecurity assessments and security policy implementation. Working with a diverse team on telecommunication systems to achieve Authority to Operate (ATO).
Target Security Specialist responsible for ensuring guest safety and preventing theft in retail. Engaging with customers to provide a friendly shopping experience while managing security measures.
Security Engineer implementing cloud - native security measures for fintech firm, collaborating closely with the CISO to enhance client trust through robust security infrastructure.
Cyber Security Compliance & Risk Analyst providing guidance and compliance support for security policies. Identifying risks, ensuring remediation, and collaborating across departments to enhance security effectiveness.
Senior Cybersecurity GRC Associate managing information security governance, risk assessments, and compliance at Corient. Join a team dedicated to supporting high - net - worth individuals in wealth preservation.
Cybersecurity Specialist at Telefónica Tech supporting user access within minimal privilege principles. Ensuring compliance and coordination with internal security processes.
CISO responsible for cybersecurity strategy, operations, and regulatory compliance in leading blockchain ecosystem. Managing risk and fostering security culture within the organization.