AppSec Engineer

About PayPay Card

PayPay Card Corporation was established in 2021 to provide users a FinTech service that is more accessible and convenient compared to previous credit cards and credit services, by integrating with the PayPay payment platform, which has surpassed 66 million users since its launch (as of October 2024).

We are looking for people who are passionate about refining our products at an overwhelming speed that other companies cannot match, as well as professionals who are interested in promoting the spread of cashless payments in Japan and the use of these payments as a financial life platform. Let us work together to create new value for users.

※ Please note that you cannot apply or be selected in parallel with PayPay Corporation, PayPay Card Corporation and PayPay Securities Corporation.

Job Description

The PayPay Card Product Security team is seeking Application Security (AppSec) engineers to work with our development teams on maintaining the security of our services.
PayPay Card Product Security team is responsible for driving the application security and infrastructure security changes within the product division - the part of PayPay Card responsible for development and operations of the PayPay Card application. Specifically AppSec engineers focus on supporting our development teams through discovery, knowledge sharing and the automation of security configuration, testing, verification and monitoring. A strong candidate for AppSec engineer will have a good understanding of software security best practices as well as an understanding of how to apply those principles to systems at scale following the DevOps methodology.

Responsibilities

Primary Responsibilities

• Working closely with Security Champions and teams on implementation of security best practices
• Supporting development teams throughout Secure SDLC (design and architecture review, code reviews, manual security assessments)
• Introducing systemic improvements to software security at PayPay Card (automation, processes, guidelines, secure libraries)

Supporting Responsibilities

• Maintaining up to date knowledge of security best practices
• Assist threat modeling of existing and upcoming products and systems.
• Training and mentoring of PayPay Card staff on security best practices and its practical application.
• Maintaining automated systems to assist teams with assessing current security status.
• Working in a fast paced environment where projects and prioritization may change frequently but maintaining a secure product is a requirement for all team members.
  
  

Required Qualifications

• 3+ years of product security experience
• Experience leading projects tasked with improving product security and/or DevOps security.
• Strong teamwork skills and the ability to collaborate with others in a diverse environment.
• Enjoy taking up a challenge and driving it to conclusion.
• Have excellent written, verbal and interpersonal communication skills. Bilingual in English and Japanese is nice to have, but not required. Proficiency in either language is required.

Preferred Qualifications

• One or more of Javascript/Typescript, Kotlin, Scala and Java.
• Experience with securing Android and iOS Applications.
• Experience with microservice-based and cloud-native applications.
• Experience working in a security position within the fintech industry.
• Native or business level Japanese proficiency.
  
  

Working Conditions

Employment Status

• Full Time

Office Location

• Tokyo Office
• You can live anywhere in Japan 

Work Hours

• Full Flex Time (No Core Time)
• In principle, 9:00am ~ 5:45pm (actual working hours: 7h45m + 1h break)

Holidays

• Every Sat/Sun/National holidays (In Japan)/New Year's break/Company-designated Special days
  
  

Paid leave

• Annual leave (up to 16 days in the first year, granted proportionally according to the month of employment. Can be used from the date of hire)

Salary

• Annual salary paid in 12 installments (monthly)
• Reviewed once a year
• Special Incentive once a year *Based on company performance and individual contribution and evaluation
• Overtime allowance, Late overtime allowance, Commuting and transportation expenses, Work style support allowance

Benefits

• Social Insurance (health insurance, employee pension, employment insurance and compensation insurance)
• 401K