Strengthen Enigmo's Overall Security! Security Engineer Wanted!Translated from Japanese

Strengthen Enigmo's Overall Security! Security Engineer Wanted! You will play a key role as a Security Engineer responsible for strengthening the security of the entire Enigmo group, primarily focusing on the C2C social shopping site "BUYMA". As a specialist in the security domain, you will be responsible for creating mechanisms to promote security throughout the organization, including strategizing and policy formulation for service and company-wide security improvements, integrating security into development processes, and establishing guidelines. [Specific Job Duties] * Formulation and promotion of security strategies and policies * Development and operation of security guidelines and standard rules * Security reviews for new feature development and system design * Support and review of security architecture design in cloud environments such as AWS and GCP * Development of development processes to promote DevSecOps * Creation of mechanisms for vulnerability management and supply chain security * Development of security governance for the use of new technologies, including AI utilization * Technical analysis and formulation of response policies in the event of a security incident * Awareness activities and mechanism building to improve security awareness across the entire development organization * Support for formulating security rules for group companies such as BUYMA TRAVEL At Enigmo, security operations are not handled by a single team but are promoted across the organization in collaboration with the Infrastructure Group, development teams, and Corporate IT teams. While this position will lead the introduction of security tools and the establishment of rules, ongoing regular operations and actual implementation are carried out in collaboration with each team. Vulnerability assessments, for example, are primarily conducted by the development side. We expect you to promote the improvement of company-wide security levels by collaborating with each team. [About the Infrastructure Group] The Infrastructure Group is responsible for designing, building, operating, and monitoring systems that require specialized knowledge in infrastructure and security within the Service Engineering Division, which is the development organization. The overall role of the Infrastructure Group is as follows: * Design/build/operation of proprietary services including BUYMA * Configuration and performance tuning of OS, various middleware, and databases * Verification/introduction of new technologies * Troubleshooting/response to failures * Security response [Technology Stack] AWS: S3 / EC2 / CloudFront / Route53 / RDS / Aurora ElastiCache / EKS / SES / SQS / Lambda / API Gateway / Cloudwatch GuardDuty / Security Hub / Detective / Config / WAF GCP: BigQuery / Cloud Storage / GKE Apache HTTP Server / Lighttpd / Nginx Apache Tomcat / Unicorn / Puma MySQL / PostgreSQL / SQL Server Memcached / Redis / Resque / Sidekiq Postfix / LDAP Amazon Linux / Windows Server / Docker Ansible / Test Kitchen / Serverspec / GitLabRunner Datadog / Grafana / New Relic / Bugsnag CloudFormation / Terraform Fastly GitLab / GitHub Slack / Google Workspace / Zoom / Notion Looker / Redash/ Okta / CrowdStrike / Zapier Netskope Private Access AI Services: Gemini / Cursor