Overview

The CISO Office works with the business divisions that develop and provide Money Forward's services to maintain and improve the security of our products. This includes controlling major clouds such as AWS and GCP, visualisation, and the design, implementation, and operation of common security functions such as WAF. The CISO Office is also responsible for strengthening the security of the company's information systems.

We are looking for security specialists to work with us so that more users can use our services with peace of mind.

Responsibility

In this position, you will utilise your knowledge and experience in coding, infrastructure, etc., and work with other product engineers to maintain and improve the security of Money Forward. As a Product Security Specialist, you will work with the security specialists in the CISO Office to carry out the following tasks:

• Development of security guardrails for AWS / GCP environments
• In-house security consulting: technical advice on security to in-house developers, architecture reviews, etc.
• Implementation or support for vulnerability assessments and penetration tests
• Collection and verification of vulnerability information, including OSINT
• Development of security-related tools and scripts
• Implementation and deployment of frameworks such as NIST CSF and CIS Controls
• Implementation of DevSecOps, including K8s, Docker, CI/CD, etc.

Qualifications

Technical skill

• Strong understanding of Computer Science, including networks, operating systems, data structures, cryptography, etc.
• Experience developing in any programming language or experience implementing security by design
• Knowledge or experience in any of the following
  • Vulnerability assessment
  • Penetration testing or red teaming
  • Forensics, malware analysis, incident response, etc.
  • Cloud security (AWS/Google Cloud)
  • Experience building and operating DevSecOps
  • Experience building and operating security solutions such as WAF, IDS / IPS, SIEM, etc.