Security Engineer ( IT Security ) - Mercari
Mercari, inc., Japan
Job Description
JD in English follows. JD
2013
Go BoldAll for OneBe a Pro3SustainabilityDiversity amp; InclusionTrust amp; OpennessWell-being for Performance4
Mercari Culture Doc
ITITIT
IT
- IT
- IT
IT
- IT
- IT
- IT
- (CASBEDRDLP)
- ,,
- ID
- ()
- ITTCP/IP, , , ,
- /IT
- (CISSP, CEH, SANS GIAC)
- PCI DSSGDPR
*
- English: Independent (CEFR-B2)
- Japanese: Proficient (CEFR-C1)
*CEFR
- 3)
- :
- YOUR CHOICE
- 2
- Sick Leave
- 2
- Mercari US
- CISOLINE1
- CISO Office
- Terraform CI
- Detection EngineeringSOAR
- Security | Mercari Engineering blog
- Security | mercan
Mercari is a Japan-based company with the mission of create value in a global marketplace where anyone can buy amp; sell. Having continuously worked toward this goal since our founding in 2013, we are now transforming from a startup into a global player. While this transformation brings its own specific set of challenges, we believe that solving them one after another will allow us to fully achieve our mission. Are you interested in working together to take on these exciting challenges?
To achieve our mission at Mercari, our organization and each of our employees share the same values and perspectives. Our individual guidelines for action are defined by our three values: Go Bold, All for One, and Be a Pro. Our organization is also shaped by our four foundations: Sustainability, Diversity amp; Inclusion, Trust amp; Openness, and Well-being for Performance. Regardless of how big Mercari gets, the culture will remain essential to achieving our mission and something we want to preserve throughout our organization.
We invite you to read the Mercari Culture Doc, which summarizes the behaviors and mindset shared by Mercari and its employees. We continue to build an environment where all of our members of diverse backgrounds are accepted and recognized, and where they can thrive while holding dear Mercari’s culture.
As an IT Security Specialist, you will work closely with the product divisions and teams to lead security initiatives within the Mercari Group. This position handles a wide range of tasks, from upstream processes like assessing risks facing the corporate IT environment and defining requirements for security measures, to implementing solutions and other downstream processes. You will also work to strengthen security for the IT environment as a whole and contribute to implementing zero-trust architecture.
Formulating risk assessments and security strategies relating to the IT environment
- Assessing risks relating to the security of the IT environment
- Defining requirements for security measures necessary for the IT environment
- Ensuring consistency with security policies
Designing security measures for the IT environment
- Selecting and comparing solutions to be implemented
- Planning operations for solutions to be implemented
- Identifying problems in operations and considering solutions
- Proposing solutions and building consensus with senior management
Implementing and running security solutions
- Running security measures (setting configurations, answering questions, etc.)
- Liaising with security vendors
- Monitoring and evaluating security measures
- Support the freedom of employees to choose whatever work style is best for them through a cloud-native environment
- Provide active support for diverse work styles and lead the industry in corporate IT security
- Work on a wide range of tasks, from upstream processes like defining security requirements to designing the company’s IT environment and actually implementing solutions
- Take on the challenge of implementing dynamic security in a rapidly-growing global organization and environment
- Experience assessing risks and formulating/designing security requirements for IT systems
- Experience building and operating security devices and monitoring infrastructure (CASB, EDR, DLP, etc.)
- Experience analyzing, building, administrating, and improving endpoint security
- Experience implementing and operating ID management and authentication systems
- Experience handling security incidents (impact analysis, investigation, response, considerat