Security Engineer

About SmartNews

News can change the world, save lives, and bring us all closer together through empathy and understanding—but not if no one reads it. Out of the hundreds of millions of articles and posts published, how do we deliver the information that matters the most?

Founded in 2012 in Tokyo, SmartNews is a leading global information and news discovery company dedicated to delivering quality information to the people who need it. We provide news that matters to millions of users thanks to our unique machine learning technology and relationships with over 3,000 global publisher partners. Our SmartNews app, available on iOS and Android, is currently used in over 150 countries worldwide.

But we’re only just getting started, and that’s why we need someone like you.

If you’re looking for a company that’s small enough so that your contributions have a visible impact on the company and product but large enough to have you tackling exciting and challenging problems, then SmartNews is the place for you. Join us and wake up every day energized, knowing that you’re delivering the news people need.

Responsibilities

• Support “shift left” security by implementing third parties and building scripts to support modern security best practices into self-service tooling
• Work with engineering stakeholders to securely design products and fix security issues
• Create workflows and processes for the intake, triage, and resolution of security issues
• Execute proactive threat modeling and implement measures to strengthen the preventative controls of cloud infrastructure
• Work with both internal and external stakeholders to fix known vulnerabilities
• Coordinate our response procedures during active product security incidents
• Empower engineers by conducting regular developer security training
• Bring enthusiasm for working at a fast-paced startup

Minimum Qualifications

• Solid understanding of the most common web application security risks as listed by the CWE Top 25 and OWASP Top 10
• DevSecOps and pipeline security implementation experience (SAST/SCA/DAST/etc.)
• Microservice architecture experience, including K8 and Docker
• Application security hands-on experience (pentesting, bug bounties, etc)
• Ability to perform root cause analysis on past security incidents to recommend improvements
• Proficiency in at least one programming or scripting language, such as Go, Java, Python, JavaScript, or Ruby
• Practical knowledge of AWS cloud services and structure
• English language fluency

Preferred Skills and Experience

• Business-level or higher proficiency in Japanese and/or Chinese
• Program Management or Data Science experience
• Strong knowledge of the AWS suite of security-related services with a certification as an AWS Security Specialist
• Experience with the operation of cloud-based infrastructure and API security using services such as AWS EC2 security groups, AWS Web Application Firewall, or AWS Shield
• Past work experience with cloud-based security services like AWS Security Hub, Amazon GuardDuty, Amazon Inspector, Amazon Detective, or AWS Config
• Skills in infrastructure-as-code technologies, such as Terraform or CloudFormation
• Exploit development, Red Team, or reverse engineering experience

Perks and Benefits at the SmartNews Tokyo Office

• Support program for employees’ self-development and well-being
• Healthy lunches are prepared on-site daily in our SmartKitchen, located in our West Office building. You can even see the cooks at work!
• Need a pick-me-up? Stop by ChikyuCoffee, our in-house coffee shop located in both the East and West Office buildings, and get a cup of gourmet coffee, espresso-based beverage, or other seasonal drink!
• SmartNews provides all healthcare and social insurance benefits required by Japanese labor law

Visa Sponsorship and Relocation Suppor

SmartNews can sponsor visas for candidates who meet eligibility requirements.

To support a smooth transition for candidates who are moving to Japan from overseas, SmartNews partners with a travel service provider.