セキュリティセールススペシャリスト

Security Specialist (Product Security)

A leading technology-driven fintech organization is seeking a Product Security Specialist to join its CISO Office and help strengthen the security posture of large-scale cloud platforms, customer-facing products, and internal systems.

This role is ideal for security professionals who enjoy working closely with software engineers, infrastructure teams, and cloud architects to build scalable, developer-friendly security programs while enabling business growth and innovation.

Responsibilities

• Establish and maintain security guardrails across AWS, Azure, and Google Cloud environments.
• Provide internal security consulting and architecture reviews for development teams.
• Conduct or support vulnerability assessments, penetration testing, and security reviews.
• Collect, analyze, and validate vulnerability intelligence from internal and external sources, including OSINT.
• Design and develop security automation tools, scripts, and internal security platforms.
• Implement and operationalize security frameworks such as NIST Cybersecurity Framework (CSF) and CIS Controls.
• Drive DevSecOps initiatives across Kubernetes, Docker, CI/CD pipelines, and modern cloud-native environments.
• Collaborate with engineering and infrastructure teams to integrate security into the entire software development lifecycle.
• Contribute to the continuous improvement of application security practices, cloud security governance, and security operations.

Required Qualifications

• Strong foundation in computer science, including networking, operating systems, cryptography, and software architecture.
• Experience in software development using at least one programming language, or practical experience implementing Security by Design principles.
• Business-level English communication skills.
• Hands-on experience in one or more of the following areas:
• Vulnerability Assessment
• Penetration Testing / Red Team Operations
• Incident Response, Forensics, or Malware Analysis
• Cloud Security
• Security Architecture Reviews
• DevSecOps
• Security Solution Operations (WAF, IDS/IPS, SIEM, etc.)

Preferred Qualifications

• Business-level Japanese communication skills.
• Experience participating in Capture The Flag (CTF) competitions.
• Experience discovering vulnerabilities, bug bounty participation, or obtaining CVEs.
• Security certifications such as CISSP, CISM, OSCP, GCIH, or equivalent.
• Strong understanding of authentication and authorization technologies, including OAuth 2.0 and OpenID Connect (OIDC).
• Experience supporting security programs in financial services or fintech environments.
• Experience leveraging AI technologies to improve software development and security workflows.

Why Join?

• Join a highly mature engineering organization where security is embedded as a business enabler rather than a blocker.
• Work alongside talented software engineers, platform engineers, and security specialists in a cloud-native environment.
• Play a key role in securing products that handle sensitive financial and customer data at scale.
• Participate in AI-driven transformation initiatives and contribute to next-generation secure product development.
• Access excellent learning opportunities including conferences, technical books, certifications, and internal knowledge-sharing programs.

Compensation

• Approx. JPY 8M – 15M+ annual compensation
• Performance-based bonus opportunities
• Comprehensive benefits and stock ownership programs

Work Style

• Hybrid work environment
• Minimum 2 days per week in the office
• Flexible working arrangements available

Location

Tokyo, Japan (Hybrid)

Keywords

Product Security, Application Security, Cyber Security, DevSecOps, Cloud Security, AWS, Azure, Google Cloud, Kubernetes, Docker, CI/CD, Penetration Testing, Vulnerability Assessment, Security Architecture Review, Security Engineering, SIEM, IDS, WAF, Incident Response, OAuth, OIDC, FinTech Security, Security Automation, CISO Office.