Назад
Company hidden
5 часов назад

Class of 2028 / New Graduate Security Engineer (Cybersecurity)

Формат работы
remote (только Japan)/hybrid
Тип работы
project
Грейд
trainee
Английский
b2
Страна
Japan
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Class of 2028 / New Graduate Security Engineer (Cybersecurity) (Cloud Security/AI): Building security automation, monitoring, threat models, and protective controls for Mercari’s large-scale cloud and application infrastructure with an accent on vulnerability management, application security, and detection engineering. Focus on analyzing logs, developing automation, researching AI and supply-chain security, and coordinating remediation under senior-engineer guidance.

Location: Japan (Roppongi/Minato City, Tokyo); remote and hybrid work arrangements are listed.

Company

hirify.global operates a marketplace platform that uses technology to circulate value and connect people globally.

What you will do

  • Participate in threat modeling, code reviews, security testing, and vulnerability triage under senior-engineer guidance.
  • Develop security automation for compliance checks, asset inventory reconciliation, alerting, monitoring, and detection rules.
  • Conduct supervised research on topics such as AI system security and supply-chain risks, then propose improvements.
  • Analyze logs, detect anomalies, investigate misconfigurations and policy violations, and coordinate remediation with developers.
  • Contribute to secure development guidelines, AI security practices, security playbooks, and engineer onboarding materials.

Requirements

  • Be able to join as a new graduate in October 2027 or April 2028 and be enrolled in a Bachelor's degree or higher program, or a technical school, in Computer Science, Information Security, or another engineering-focused major.
  • Demonstrate strong interest in cybersecurity and engineering and alignment with hirify.global’s mission and values.
  • Have programming experience in one or more languages, including Go, Python, PHP, or JavaScript.
  • Have effective interpersonal and communication skills.
  • Have basic Linux familiarity, including common commands and scripting.
  • Have foundational knowledge of SQL and data querying.
  • Have independent-level proficiency in English or Japanese (CEFR B2).

Nice to have

  • Security conference participation or speaking experience, including SECCON, Hardening Project, Black Hat, or DEF CON.
  • Hands-on experience with CTF competitions, bug bounty programs, penetration testing, or web and mobile application security testing.
  • Knowledge of GCP, AWS, Azure, Docker, Kubernetes, security automation, or DevSecOps.
  • Experience using AI for security operations automation or protecting AI-driven systems.
  • Experience with Git, dependency management, build and deployment tools, and modern web or mobile applications.

Culture & Benefits

  • Work with cloud-native infrastructure including GCP, Kubernetes, and Terraform, supporting systems used by tens of millions of users.
  • Receive mentorship from experienced security engineers and collaborate across globally diverse Threat Detection and Response, Platform Security, Product Security, and Enterprise Security teams.
  • Contribute to AI-driven development, zero-trust architecture, secure-by-design initiatives, and automation in a fast-paced environment.
  • Employment is permanent for new graduates, with the office in Japan and an internship generally expected before applying for the full-time position.

Hiring process

  • Complete application screening followed by a HackerRank skill assessment.
  • Participate in three interview rounds; the offer is determined after the final interview.
  • Applicants unable to participate in the internship due to personal circumstances may apply through this posting. The application deadline is December 31, 2026, at 23:59 JST.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →