Security Engineer

About nanameue, Inc.

At nanameue, Inc., our goal is to connect people through our social media app Yay!. nanameue, Inc. started in May of 2013 with roots in Japan and Thailand. With growing teams, nanameue, Inc. has built one of Japan’s top social media application with over 5.5 Million users. We are venturing into Web3xSNS with a mission to “Building Community with Science”.

Having a global mindset, nanameue, Inc is built with people from a variety of different cultures from Japan, Thailand, Malaysia, Brazil, and Australia to name a few. To maintain the global culture, our company language is English and we continue to welcome new members from all over the world.

Our goal is to build a virtual space where everyone can have their presence as themselves and welcome everyone as they are.

Description

We are looking for a Security Engineer to help our strengthen the security for our Social Media app Yay!. You will work closely with multiple teams on the security of the application and work directly with the CTO and Head of Development.

Responsibilities:

• Developing security plans based on company strategy

• Perform risk and security assessment for company's products (API, Mobile App, Cloud, Web3 infrastructure, etc.)

• Perform a code auditing, review of software designs (API, Mobile App, Blockchain Contracts, etc.)

• Coordinate to implement the procedures and policies related to security

• Manage and mitigate security vulnerabilities, conduct penetration testing along with scanning for vulnerabilities in the system and execute needed risk assessments

• Perform the data forensic with third parties

• Research and finding new attack vectors

• Working with developers to secure the products and services by performing controlled attack yourself

• Maintain and build a data security and privacy framework/management system

• Perform internal audit of related security tasks

• Perform other tasks delegated by management

Requirements

• Experience in application-level security testing

• Experience in enhancing public cloud security (preferably AWS)

• Experience in penetration testing/application security testing, vulnerability scanning, and threat-based risk assessment

• Experience in the Network security especially in the cloud settings

• Experience in ISO27001 and ISO27701

• Experience in security frameworks such as OWASP

• Bachelor's degree in computer engineering, computer science, or other related fields

Language requirements

• Business Level in English (company internal language is English)
• N2 Level in Japanese (read/write)

Preferred qualifications

• Experience in two of these programming languages: Objective-C (and Swift) / Kotlin / Ruby / Sodility
• Certification in two of these: AWS Security Speciality, CISA, CISM, CRISC, COBIT 5 Assessor, ISO27001 Lead Implementer, ISO27001 Lead Auditor, ISO27701 Lead Implementor, ISO27701 Lead Auditor
• Experience in the cryptography, authentication, and web/mobile security

WHAT WE OFFER

• Competitive salary and performance based bonus plus standard social security insurance
• Hybrid Work Environment
• Flextime: Core time 11:00 to 15:00
• For overseas candidates: Visa Support, Re-location assistance to help you start your life in Tokyo, including first-time airfare to Tokyo, and hotel room for two weeks while we help you search for housing.
• Holidays: Annual leave, Summer as well as Winter Holidays, Childcare and Family care leave
• Support in buying the needed items to make your work easier: applications, large monitor even a good chair (unfortunately, pajamas not included; though, we are trying to get it approved soon)
• Free snacks, cheeses, soups, and drinks, of course!
• Transportation allowance OR if you live near the office, we will give you 20,000 JPY monthly towards your rent
• We will subsidize books, language courses, conference tickets, and even paid apps.
• Annual Company trip (as we overcome travel restrictions)

Our Values

• Be Proactive
• Be Outstanding
• Be Accountable