業務内容

• Establish security guardrails for AWS/Azure/GCP.
• Provide security consulting and architecture reviews for developers.
• Conduct or support vulnerability assessments and penetration testing.
• Collect and verify vulnerability intelligence (OSINT).
• Develop security tooling and automation scripts.
• Implement security frameworks (NIST CSF, CIS Controls).
• Drive DevSecOps in pipelines using Kubernetes, Docker, and CI/CD.

技術スタック

必須スキル

• CS fundamentals: networking, operating systems, data structures, cryptography
• Software development experience in at least one language, or Security by Design
• Business-level English
• Experience in at least one area: vulnerability assessment, penetration testing/red teaming, cloud security, architecture reviews, DevSecOps, or security tooling (WAF/IDS/IPS/SIEM)

歓迎スキル（該当する場合）

• Business-level Japanese
• CTF participation or bug hunting / CVEs
• Certifications (CISSP, CISM, OSCP, GCIH)
• OIDC/OAuth knowledge
• Fintech security operations / FISC guidelines
• AI development experience or AI tooling for development processes

キャリア成長観点

• Shape security strategy aligned with business value, balancing risk and UX.
• Build autonomous security across the organization via guardrails, automation, and frameworks.
• Scale security across multi-cloud, DevSecOps, and security tooling.
• Develop in-house security capabilities: tooling, processes, and incident response.
• Opportunities in fintech security, certification tracks, and AI-enabled security workflows.