Security Engineer (CryptoCurrency) - Mercoin
Mercari, inc., Japan

JD in Japanese follows. JD

Circulate your value, anywhere and everywhere

We believe that every one of us holds untapped potential and that everything has value regardless of its form. At Mercoin, we are creating products that help people unleash their potential, empowering them to create and circulate value. Beyond goods. Beyond money. We envision a world where anyone can easily exchange cryptoassets, digital assets, and any other forms of value, utilizing cutting-edge technologies to break the boundaries of what is possible.

To achieve our mission at Mercari, our organization and each of our employees share the same values and perspectives. Our individual guidelines for action are defined by our three values: Go Bold, All for One, and Be a Pro. Our organization is also shaped by our four foundations: Sustainability, Diversity amp; Inclusion, Trust amp; Openness, and Well-being for Performance. Regardless of how big Mercari gets, the culture will remain essential to achieving our mission and something we want to preserve throughout our organization.

We invite you to read the Mercari Culture Doc, which summarizes the behaviors and mindset shared by Mercari and its employees. We continue to build an environment where all of our members of diverse backgrounds are accepted and recognized, and where they can thrive while holding dear Mercari’s culture.

insert details here using normal text

Mercari Group focuses on security for its cashless payment and credit services. As a crypto-asset security specialist, you will help strengthen security for crypto-asset trading and wallet management systems while collaborating with the upper management and other departments. You will also work to solve issues using the latest security technologies, including the cloud and microservices which support our cashless payment service, Merpay. This service exists as part of the Mercari marketplace app, Japan’s largest marketplace app with upwards of 17M users per month. Specifically, you will:

• Review design and requirements used to define security requirements for crypto-asset trading systems
• Review design and requirements used to define security requirements for wallet management systems
• Review source code to find security bugs and coding errors
• Perform security testing and penetration testing for the crypto-asset trading and wallet management systems’ web, API, iOS and Android applications
• Review infrastructure, data flows, and other proposed architecture; propose security control features to mitigate risk
• Incorporate security checks and security test automation into development flow while maintaining ease and transparency
• Develop technical solutions to shore up security vulnerabilities

• Opportunity to take on a wide range of tasks at your own discretion, including everything from designing crypto-asset systems based on security requirement definitions and other upstream processes to downstream processes such as the implementation of actual solutions
• Can challenge oneself to design security for some of Japan’s leading cloud/microservice-based financial services and crypto-asset systems (blockchain, wallet, etc.)
• Can take on dynamic security design as part of a quickly-growing, global environment and organization

• A shared belief in Merpay’s mission and values
• Experience related to application security or infrastructure security (security reviews, security system development, penetration testing, web application security testing, threat modeling, security automation, etc.)
• Programming skills in some coding language (Go, PHP, Java, Ruby, Python, C/C++, Objective-C, Swift, Kotlin, or JavaScript)
• Basic knowledge and strong interest in crypto-assets, blockchain, and wallet systems
• Fundamental understanding of security engineering, computer and network security, system operation security, mobile security, authentication, security protocol, and applied cryptology
• Deep understanding of modern web application architecture, HTTP, TCI/IP, standard networks, and system security tech
• Enjoys working with developers to develop secure products

• Experience in security work for crypto-asset traders
• Experience related to crypto-assets, blockchain, wallet services, etc.
• Abundant experience securing Go, JavaScript, iOS, and Android applications
• Prepared to proactively take on challenges with a focus on results
• Interest in microservice architecture
• Experience handling cloud infrastructure, such as GCP and AWS

• Has experience and strong curiosity i

Job Rewards and Benefits