セキュリティエンジニア（レッド チーム）

Job Description

PayPay, a leading fintech company with over 69 million users, is seeking a skilled Security Engineer to join their Red Team. This role is crucial for maintaining the security and integrity of PayPay's systems and protecting against potential cyber threats. The Security Engineer will work within a team of white hat hackers, simulating attacks to identify vulnerabilities before malicious actors can exploit them.

The company is composed of diverse members from 50 countries and is still in growing phase.

Role involves:

• Conducting advanced vulnerability assessments and penetration tests, including manual techniques.
• Creating cyber threat scenarios and planning, executing, and evaluating red team exercises.
• Researching attacks and vulnerabilities, and enhancing cyber resilience through threat intelligence.
• Developing, evaluating, and improving internal and product security rules.
• Managing vulnerabilities, including providing remediation support, verifying fixes, and tracking progress.
• Providing technical security guidance, design consultation, and analysis.
• Evaluating the security of services and campaigns.

Requirements:

• Experience in vulnerability assessment/penetration testing for 3+ years.
• Experience with vulnerability assessment/penetration testing on web applications, platforms (AWS), and mobile applications (iOS/Android/watchOS).
• System development experience and security implementation experience in systems or infrastructure.
• Understanding and experience in building/operating cloud services (AWS, GCP, etc.).
• Native-level Japanese language skills.
• English communication skills (reading and writing at a conversational level).

Role offers:

• Opportunity to leverage expertise in a large-scale environment with diverse technologies.
• Experience in designing attack predictions using threat intelligence and analysis.
• Opportunities for skill development through collaboration with CSIRT, research, and study groups.