Description:

KOMOJU, a leading cross-border payment gateway in Japan, is seeking an experienced Application Security Engineer to join their team in Tokyo.
The role involves managing bug bounty programs, building a robust application security program, and fostering a strong security culture within the organization.
The ideal candidate should have previous experience as a developer to effectively understand and mitigate security vulnerabilities.
The position emphasizes the importance of passion, ownership, and effective communication skills for success.
Responsibilities include developing security policies, conducting risk assessments, managing external pentesting, integrating security into the Software Development Life Cycle (SDLC), and promoting secure coding practices.

Requirements:

Candidates must have a minimum of 3 years of hands-on experience in the application security domain.
Familiarity with key application security principles, frameworks, and technologies such as CWE, MITRE, OWASP, and CIS Benchmarks is required.
A strong understanding of security principles and practices is essential.
Previous experience as a developer is highly desirable to aid in understanding security vulnerabilities.
Familiarity with application security assessment tools and end-to-end vulnerability management (SAST and DAST) is necessary.
Candidates should possess the technical knowledge to understand vulnerability risks and remediation steps.
Experience with DevSecOps and building security controls into CI/CD pipelines using tools like GitHub actions, CircleCI, or GitLab CI/CD is required.
Familiarity with security hardening standards and their implementation is also necessary.

Degica offers a flexible remote work environment while providing office space for those who prefer in-person collaboration.
Employees receive 10 days of regular vacation, plus an additional 5 days for summer and 5 days for winter vacation.
A paid birthday holiday is included in the benefits package.
There is a budget for self-learning allowance to help employees keep their skills current.
Language training for Japanese is also provided to employees.