Security Engineer

PLAID

Security

Cybersec

Microsvc

About this role

This Security Engineer role strengthens privacy and security across the components of PLAID’s products, with a focus on enabling safe use of large-scale user behavioral data. The work includes defining privacy and security requirements through risk analysis, reviewing web applications and addressing vulnerabilities, maintaining secure configurations for external systems such as public clouds, and implementing systems that protect personal data.

The role also involves identifying and responding to risks during security incidents, supporting developers and development processes, and coordinating with internal members on preparation for the ISMS security certification. The security team works closely with product teams, legal, and corporate IT to protect employees, clients, and end users.

KARTE is organized as a set of product-specific microservices. Each team typically has five to ten members and works autonomously from technology selection through design, development, and operations. Engineers, designers, and product managers communicate across roles. Security work includes threat analysis during design and security reviews conducted with product teams.

The product context includes the KARTE CX platform and related products such as KARTE Blocks, Signals, and Craft. As the product portfolio expands into enterprise use, the security team addresses how to maintain a high security standard without reducing development speed or flexibility. The posting states that security processes and maturity are still developing. It also notes that generative AI is increasing development speed and is being incorporated into product features, creating a need to advance security processes and maturity at a similar pace.

The stated work location is the company’s head office in Ginza, Tokyo. The position uses a hybrid work arrangement combining office attendance and remote work. Depending on company and team circumstances, a certain number of office-attendance days may be requested.

This is an AI-generated summary of the employer's original posting — details can be incomplete, out of date or simply wrong. Always confirm everything on the official posting before applying.