English summary for screening — check the original posting before applying.
TOKIUM is establishing a new Product Security Promotion Team, reporting directly to the CTO, to ensure the safe delivery of AI-generated code without hindering development. This role is crucial for building systems that maintain quality and security as AI coding agents increase code generation volume.
Must-haves
- 5+ years of full-stack web application development experience (or 3 years for exceptional candidates)
- Experience taking responsibility for development processes (design, improvement, CI setup, review culture)
- Practical experience using AI for development (integrating coding agents like Claude Code into workflows)
- Basic security knowledge relevant to development (authentication, authorization, data access)
Nice-to-haves
- Security lead/manager experience in SaaS/BtoB
- Experience automating CI/CD with security checks (static analysis, AI reviewers)
- Knowledge of SBOM and supply chain security (SLSA, signature verification)
- Experience with AI agent/LLM specific threats (prompt injection, data leaks)
- Experience designing/operating Identity and Privilege Management (IdP, SSO)
- Information security experience in accounting/finance BtoB domains
- CISSP, CSSLP, OSCP certifications
Tech stack
Ruby on RailsUnicornNginxPostgreSQLRedisDockerElasticsearchTypeScriptReactReduxstyled-componentsStorybookWebpackAWSAnsibleDatadog
Work style
Hybrid, Tokyo (Ginza)
Other notes
Salary: ¥8,000,000 - ¥12,000,000 per year. Flextime with core hours 9:00-15:00. Overtime approx. 20-30 hours/month. Company provides support for AI tool usage up to ¥100,000/month.