Jobs in Japan
Explore hand-picked jobs in Japan for English speakers across tech, education, marketing, and more.
Vetted companies only. Apply from overseas.
Jobs in Japan
Explore hand-picked jobs in Japan for English speakers across tech, education, marketing, and more.
Vetted companies only. Apply from overseas.
MercariAs a member of the Mercari Security Engineering Team, you will review security designs and processes, develop and deploy security countermeasures, and conduct penetration tests. This is a unique role within Mercari because security engineers are involved in projects that impact the entire organization. Examples of responsibilities include monitoring, log analysis, and development of logging infrastructure; performing security reviews and creating threat models; designing and implementing security automation or dashboards; web and mobile application security testing; and technical project management. Participate in threat modeling, code reviews, and security testing under the guidance of senior engineers to help identify and reduce risk in Mercari’s systems. Develop or enhance automation scripts for common security tasks such as compliance checks, asset inventory reconciliation, and alerting. Conduct focused security research on a supervised topic (e.g., AI system security, supply chain risks), summarize key findings, and propose actionable improvements for Mercari. Support vulnerability management processes by helping triage security findings, verify issues, and coordinate with developers on remediation efforts. Contribute to internal documentation, including secure development guidelines, AI security best practices, security playbooks, and onboarding material for engineers. Assist in security monitoring efforts, such as analyzing logs to detect anomalies, tuning detection rules, and helping track misconfigurations or policy violations. The role may be in the Threat Detection and Response Team, Platform Security Team, Product Security Team, or Enterprise Security Team. The Threat Detection and Response Team develops and operates Mercari Group’s security monitoring, detection engineering, and incident response capabilities. The Platform Security Team develops and operates security controls and guardrails for Mercari's global engineering platform. The Product Security Team ensures customer-facing and internal-facing applications are built securely throughout the development lifecycle. The Enterprise Security Team develops and operates scalable security controls and guardrails for Mercari’s global workforce platform. Mercari’s platform uses modern, cloud-native technologies such as GCP, Kubernetes, and Terraform, and integrates advanced AI and automation tools. You’ll work with data and systems supporting tens of millions of users, and learn from experienced security engineers. The Security Engineering and Strategy team deals with a vast array of data, logs, and dependencies, using complex cloud infrastructure to tackle new challenges. As the number of organizations and services grows, automation is important to reduce manual work and build out security systems.
- Shared understanding and belief in our company’s mission and values - Strong interest in cybersecurity and engineering - Programming experience with one or more programming languages including but not limited to: Go, Python, PHP, JavaScript - Enrolled in a Bachelor's degree (or higher) program or technical school in Computer Science, Information Security, or other engineering-focused major - Effective interpersonal and communication skills - Basic familiarity with Linux, including common commands and scripting - Foundational knowledge of SQL and data querying - English or Japanese: Independent (CEFR-B2)
- Basic understanding or strong interest in any of the following: - Experience attending or speaking at domestic and international security conferences, such as SECCON, Hardening Project, Black Hat, or DEF CON. - Hands-on experience in security practices such as participating in CTF (Capture The Flag) competitions, bug bounty programs, or penetration testing. - Knowledge of Web or mobile application security testing. - Public cloud infrastructure platforms (GCP, AWS or Azure) - Container and orchestration technologies (Docker, Kubernetes) - Security automation and DevSecOps - Experience leveraging AI for security operations automation and the protection of AI-driven systems - Basic experience with software development tools such as Git, dependency management, build and deployment tools - Understanding of modern Web or mobile applications
