Security Engineer

■ Job Description This position involves maintaining and improving the security quality of products, infrastructure, and internal IT, and handling practical tasks such as vulnerability management, design support, and audit response. You will proactively participate in promoting DevSecOps and enhancing security operations. ■ Specifically: • Vulnerability scanning, reporting, and remediation management • Monitoring of dependent libraries • Technical support for operation, auditing, and evidence trail preparation under ISMS (ISO27001) • Support for preparation towards obtaining new security standards such as SOC2 • Initial response to customer security questionnaires (checklists) and FAQ preparation • Security review of implementation code and API design • Diagnosis such as penetration testing/SAST and collaboration with external vendors • Internal security training and knowledge development • Development of detection and response processes using security alerts/SIEM ■ Tools/Languages/Environment Used - Web Backend: TypeScript (Nest.js), some Java (Spring Boot) - Frontend: TypeScript (Next.js), Chakra UI - Database: TiDB, Aurora MySQL, MemoryDB for Redis - Infrastructure/Middleware: AWS, IaC, Nginx, Supervisor - Monitoring/Analysis: New Relic, Sentry, AWS (CloudWatch), BigQuery, Google Data Studio, Metabase, Trocco - Development & Operations: Docker, GitHub Actions, Amplify Hosting, CloudFront, GitHub ■ Working Hours 9:00 AM - 6:00 PM (including a 1-hour break; overtime work may be required). Flextime system (core time 10:00 AM - 4:00 PM). ■ Job Requirements - 2-3 years of practical experience in security-related fields or experience in security as an SRE/infrastructure professional - Experience in vulnerability assessment and management based on OWASP/CVE, etc. - Experience implementing scripts and automation using Python/Go/Shell, etc. - Practical experience with AI tools and coding agents such as Claude/ChatGPT/Gemini - Business-level Japanese proficiency ■ Preferred Skills - Practical experience in cloud security such as AWS Security Hub/GuardDuty/CloudTrail - Experience in security log integration with service monitoring infrastructure or alert operation - Experience in building or preparing for SOC2 compliance and external audit response - Experience reading and communicating documents in English ■ Benefits - Social insurance (health, pension, employment, workers' compensation) - Commuting allowance - Company-provided laptop - Health checkup cost coverage - Childbirth and childcare support system - Life and health support leave