Cybersecurity Engineer

WealthNavi, Japan's leading robo-advisor, set up a cybersecurity team in 2024 to counter advanced attacks, and the team is still at an early stage. The Cybersecurity Engineer covers the team's basic functions and some core and advanced ones, across both corporate and product security.

Duties include monitoring and responding with security products and a SIEM, analysing threat intelligence and applying it to the company's products, investigating incidents with other teams, designing and running security training, evaluating and operating new security solutions, acting on vulnerabilities that affect the company, writing monthly reports, running vulnerability assessments on several products, strengthening product security with development teams and raising security literacy.

Applicants need one of: two or more years of cybersecurity work at a business company; two or more years of security-service engineering at a vendor or system integrator; or three or more years in development or IT operations for those new to security. They also need monitoring and response with a SIEM, manual vulnerability assessment (for example Burp Suite), or cloud or product security experience. Application development, public speaking or writing, bug bounties and OSCP-type certificates are preferred.