Overview

The CISO Office works with the business divisions that develop and provide Money Forward's services to maintain and improve the security of our products. This includes controlling major clouds such as AWS and GCP, visualisation, and the design, implementation, and operation of common security functions such as WAF. The CISO Office is also responsible for strengthening the security of the company's information systems.

We are looking for security specialists to work with us so that more users can use our services with peace of mind.

Responsibility

In this position, you will leverage your expertise in penetration testing and red teaming to enhance the security posture of Money Forward. Collaborating closely with the security specialists in the CISO Office, your primary responsibilities will include:

• Conducting comprehensive penetration tests and red team exercises to identify vulnerabilities and assess the security of our systems and applications
• Automating red team and penetration testing processes to improve efficiency and coverage, utilizing tools and scripts to streamline repetitive tasks
• Designing and delivering training programs to educate and upskill internal teams on red teaming methodologies and best practices
• Supporting or leading vulnerability assessments and penetration testing initiatives
• Gathering and analyzing vulnerability information, including Open Source Intelligence (OSINT)

Qualifications

Technical skill

• Strong understanding of Computer Science, including networks, operating systems, data structures, cryptography, etc.
• Proven experience in penetration testing, red teaming, or related offensive security roles
• Basic scripting and exploit writing skills