Product Security Engineer

The PayPay Product Security team is looking for experienced infrastructure security engineers to lead improvements to our infrastructure and operational security, and introduce key security solutions, such as SOAR.

PayPay Product Security team is responsible for driving the application security and infrastructure security changes within the product division - the part of PayPay responsible for development and operations of the PayPay app. A strong candidate for the infrastructure security engineer position will be knowledgeable about modern infrastructure solutions (such as Kubernetes, various public clouds and their services, SQL and no-SQL databases, ElasticSearch, message brokers and so on), security challenges and threats relevant to them, and have experience in one of the following areas:

• Leading projects to improve infrastructure security at scale (e.g. introducing role-based access control, hardening K8s configurations, introducing temporary access credentials for database access, and so on)
• Introducing and improving security orchestration and automation, as well as solution to gather, store and analyze security events and assets

Primary Responsibilities

• Analyzing security risks relevant to the production infrastructure
• Designing security measures for the product infrastructure environment
• Implementing and running security solutions (SIEM, vulnerability management, network security, cloud security, container security, etc.)
• Improve security incident handling within product division.
• Improving observability and monitoring for security information and events.
• Assisting infrastructure teams in prioritizing security goals

Supporting Responsibilities

• Assisting infrastructure teams in implementing and running secure solutions
• Participating in major infrastructure projects as a security expert

Qualifications

• 2+ years of infrastructure security or relevant experience
• Solid understanding of security principles, protocols, and best practices
• Solid programming skills in one or more programming languages, such as Python, Golang
• Experience leading projects in any kind of security solutions, such as CNAPP, PAM, IDS/IPS, SIEM, SOAR, WAF, NGFW, etc
• Hands-on experience with cloud platforms, preferably AWS
• Hands-on Terraform experience. Experience with other IAC tools is also acceptable
• Hands-on Linux experience and comfortable with Linux commands
• Hands-on experience with CI/CD pipelines and tools like Github Action, Jenkins, ArgoCD, etc
• Knowledge of containerization technologies such as Docker and Kubernetes
• Strong teamwork skills and the ability to collaborate with others in a diverse environment
• Enjoy taking up a challenge and driving it to a conclusion

Preferred Qualifications

• Previous experience working in DevOps, SRE, or similar roles
• Experience working with microservice-based systems
• Experience working in a security position within the fintech industry
• Native or business level Japanese proficiency