Security Engineer, CQO Office, Tokyo

Overview

We are strengthening our security engineering capabilities to support the rapid growth and increasing complexity of Money Forward’s products and infrastructure. As we expand our use of AI, cloud services, and modern development practices, the need for proactive, engineering-focused security measures is becoming more critical. We are looking for a Security Engineer who can work closely with development and infrastructure teams to build secure-by-design systems and processes. This role will contribute directly to enhancing the overall security posture of the organization and protecting our users’ data.

Responsibilities and Duties

You will design, implement, and maintain security controls across our cloud-based infrastructure, primarily on AWS. Working closely with software engineers and SREs, you will support secure architecture design, perform security reviews of code and infrastructure, and automate security checks through scripting and tooling. You will also help evaluate, introduce, and optimize the use of AI-assisted development tools (such as Claude, Cursor, and Codex) in a secure manner. In addition, you will participate in incident response, vulnerability management, and continuous improvement of our security processes and guidelines.

Job Satisfaction and Experience Gained

In this role, you will gain hands-on experience in modern security engineering practices within a large-scale cloud-native environment. You will have the opportunity to work with cutting-edge AI tools and contribute to building secure AI-driven development workflows. By collaborating closely with cross-functional teams, you will deepen your understanding of both application and infrastructure security. This position offers the chance to influence security strategy and standards that impact multiple products and services across the company.

Expected Role

You are expected to function as a hands-on security engineer who can design and implement practical security solutions rather than only providing policy-level guidance. The role requires you to proactively identify security risks in our systems and development processes, and to propose and implement effective mitigations. You will act as a bridge between security and development teams, helping engineers adopt secure practices and tooling without hindering productivity. Over time, you will help establish and promote best practices, patterns, and reusable components that raise the overall security baseline.

Expected Mindset

We expect someone who approaches security as an enabler of the business and development teams, not merely as a gatekeeper. You should be curious, continuously learning about emerging threats, tools, and best practices, especially in the areas of cloud and AI-assisted development. A data-driven and pragmatic mindset is important, with a focus on balancing security, usability, and speed. You should also value collaboration and clear communication, working constructively with stakeholders who may have different priorities.

Required Skills and Experience

• Practical experience as a security engineer, infrastructure engineer, SRE, or software engineer with strong security involvement.
• Hands-on experience with AWS or other major cloud platforms, including design, deployment, and operation of secure environments.
• Ability to script or code (e.g., using Python, shell, or similar languages) to automate security checks, integrations, and tooling.
• Experience with security assessments such as threat modeling, vulnerability analysis, or secure code review in a development or DevOps context.
• Familiarity with modern development workflows (CI/CD, Infrastructure as Code, containerization) and how to embed security into these processes.
• Strong communication skills and the ability to collaborate with engineers and non-engineers to explain risks and propose solutions.

Preferred Skills and Experience

• Experience designing and operating security for large-scale or highly available systems on AWS.
• Experience with security automation using AI tools (such as Claude, Cursor, Codex) or other modern developer-assistance platforms.
• Knowledge of application security, including secure coding practices, API security, and common vulnerabilities (e.g., OWASP Top 10).
• Experience with incident response, log analysis, and security monitoring in a cloud-native environment.
• Certifications or formal training in information security or cloud security are a plus, but not mandatory.
• Experience in AI development and/or experience in using AI tools to improve development processes.
• • Money Forward is at a major turning point, shifting "from Cloud to AI." We are currently driving "AX (AI Transformation)"—the next step beyond DX—with the goal of providing "Digital Workers," where AI agents autonomously execute tasks. As we enter a phase of evolving into Japan's No. 1 back-office AI company by integrating AI agents into all of our products in the future, we are looking for individuals who can contribute to AI-driven development and value creation.

Language Requirements

• Japanese Language Requirements：No Japanese language requirement
• English Language Requirements：TOEIC score of 700 or above
  • (Note: If you have other qualifications or experiences demonstrating English proficiency, such as EIKEN Pre-1, EIKEN 2nd Grade (CSE score 1950+), TOEFL iBT 60+, IELTS 5.0+, or Cambridge FCE.), feel free to discuss with us)
    For those without a TOEIC 700+ equivalent score, they will be asked to take a designated test during the interview process (generally after the first interview)

Who We’re Looking For

We are looking for someone who is genuinely interested in both security and product development, and who enjoys building secure systems rather than simply pointing out issues. You should be self-driven, able to take ownership of problems, and willing to dive into unfamiliar areas such as new AWS services or emerging AI tools. We welcome people who value teamwork, are respectful of diverse perspectives, and can communicate clearly in an international environment. If you are excited about combining security engineering with AI-assisted development in a fast-growing company, we would like to talk with you.

Technology Stack

• Platform：AWS

Tools Used

• Development Environment / AI-assisted Development：Claude, Cursor, Codex

Work Environment

At Money Forward, we provide an environment where we can create world-class services together, and we are looking forward to welcoming you.

• Provided PC Specs: We provide PCs equipped with the latest CPUs (MacOS or Windows). Custom-made PCs tailored to business requirements and replacements with the latest OS are also possible.
• Systems to Enhance the Development Environment: Peripheral devices necessary for work (such as displays, mice, keyboards) can be purchased as office supplies. Generally, you can choose from standard products (catalog), and if conditions are met, you can apply for non-standard products as well. (*Excluding certain group companies)
• Money Forward Library: We have a library system where you can freely borrow books, ranging from technical books to management books. Desired books can be purchased at the company's expense.
• Referral Driven: We cover the cost of recruitment meals. There is a referral reward system.
• Conference Participation Support: The company partially covers participation in domestic and international conferences, such as RubyKaigi and Google I/O.