Security Engineer (Internship) - Mercari
Mercari, inc., Japan

JD in Japanese follows. JD

We are currently taking application from those who graduate after March 2023. 20233

Mercari is a Japan-based company with the mission of create value in a global marketplace where anyone can buy amp; sell. Having continuously worked toward this goal since our founding in 2013, we are now transforming from a startup into a global player. While this transformation brings its own specific set of challenges, we believe that solving them one after another will allow us to fully achieve our mission. Are you interested in working together to take on these exciting challenges?

To achieve our mission at Mercari, our organization and each of our employees share the same values and perspectives. Our individual guidelines for action are defined by our three values: Go Bold, All for One, and Be a Pro. Our organization is also shaped by our four foundations: Sustainability, Diversity amp; Inclusion, Trust amp; Openness, and Well-being for Performance. Regardless of how big Mercari gets, the culture will remain essential to achieving our mission and something we want to preserve throughout our organization.

We invite you to read the Mercari Culture Doc, which summarizes the behaviors and mindset shared by Mercari and its employees. We continue to build an environment where all of our members of diverse backgrounds are accepted and recognized, and where they can thrive while holding dear Mercari’s culture.

• Mercari is working hard to minimize the impact of the COVID-19 outbreak. However, we are currently having difficulty in providing an adequate response to all applicants. We apologize for any inconvenience this may cause and ask for your understanding that we will give priority to hiring people in Japan (e.g. foreign nationals with a valid work visa). Our recruiters will continue to communicate with those who have already applied for the position, and we will continue to monitor the situation and adjust our policies as the situation changes.

As an Intern in the Mercari Security Engineering and Strategy Team, you will have the opportunity to participate in security design, process reviews as well as develop and deploy security countermeasures, and execute penetration tests. This is a unique role within Mercari since you will be involved in high-stakes projects across the organization. The candidate will be exposed to the following topics, and will be invited to work on one opportunity of his/her choice:

• Monitoring and log analysis
• Penetration testing, threat modeling and security automation
• Web and mobile application security testing
• Technical project management

For each of these topics, the candidate will need to:

• learn about Mercari’s infrastructure
• create a map representing how systems interact with each other
• understand the underlying code and structure
• conduct supervised experimentation to achieve a decided objective
• describe discoveries, identify for improvements, and present findings to the stakeholders
• cooperate with the system owners to plan improvements

Why would Mercari be a good place to learn about these topics?

• Mercari’s infrastructure relies on current cloud base technology
• the scale of the data and systems that Mercari is using makes it a challenging environment and a unique opportunity to tackle difficult problems

• The Security Engineering and Strategy team at Mercari is responsible for dealing with a vast array of data, logs, and dependencies. As a member of the team, you will be able to employ cutting-edge and complex cloud infrastructure systems to help us tackle complex challenges.
• With a rapidly growing number of organizations and services, it is extremely important for Mercari to introduce automation and reduce dependency on manual work as much as possible. This is an exciting opportunity to gain experience in helping us build out our security systems and solve interesting challenges in a fast-paced environment.

• Shared understanding and belief in our company’s mission and values
• Strong interest in security
• Able to work more than 20 hours per week for 2 or 3 months
• Programming experience with one or more programming languages including but not limited to: Go, Python, PHP, Javascript
• Enrolled in a Bachelor's degree (or higher) program or technical school in Computer Science, Information Security, or other engineering-focused major
• Effective interpersonal and communication skills
• Basic Linux understanding and an ability to operate Linux
• Basic familiarity with SQ

Job Rewards and Benefits