Product Security Engineer (Security Engineering)

Job Description

The PayPay Product Security team is looking for experienced infrastructure security engineers to lead improvements to our infrastructure and operational security, and introduce key security solutions.

PayPay Product Security team is responsible for driving the application security and infrastructure security changes within the product division - the part of PayPay responsible for development and operations of the PayPay app. A strong candidate for the infrastructure security engineer position will be knowledgeable about modern infrastructure solutions (such as Kubernetes, various public clouds and their services, message brokers and so on), security challenges and threats relevant to them, and have experience in one of the following areas:

• Leading projects to improve infrastructure security at scale (e.g. introducing role-based access control, hardening K8s configurations, introducing temporary access credentials for database access, and so on)
• Introducing and improving security orchestration and automation, as well as solution to gather, store and analyze security events and assets

Primary Responsibilities

• Development of tools and technologies to assist PayPay security positioning
• Designing automations to assist in meeting compliance standards
• Analyzing security risks relevant to PayPay infrastructure
• Designing security measures for the product infrastructure environment
• Improving observability and monitoring for security information and events.

Supporting Responsibilities

• Assisting infrastructure teams in implementing and running secure solutions
• Participating in major infrastructure projects as a security expert
• Assisting infrastructure teams in prioritizing security goals
• Implementing and running security solutions
• Improve security incident handling within product division.

Qualifications

• 2+ years of infrastructure security or relevant experience
• Solid understanding of security principles, protocols, and best practices
• Solid programming skills in one or more programming languages, such as Java, Python, Golang
• Hands-on experience with cloud platforms, preferably AWS
• Hands-on Terraform experience. Experience with other IAC tools is also acceptable
• Hands-on experience with CI/CD pipelines and tools like Github Action, Jenkins, ArgoCD, etc
• Knowledge of containerization technologies such as Docker and Kubernetes
• Strong teamwork skills and the ability to collaborate with others in a diverse environment
• Enjoy taking up a challenge and driving it to a conclusion

Preferred Qualifications

• Previous experience working in DevOps, SRE, or similar roles
• Experience working with microservice-based systems
• Experience working in a security position within the fintech industry
• Native or business level Japanese proficiency