Product Security - Application Security Engineer

About PayPay

PayPay is a fintech company that has grown to over 58M users since its launch in 2018. Our team is hugely diverse with members from over 50 different countries. To build "PayPay", we allied with Paytm; the biggest payment service company in India. Based on their customer-first technology, we created and expanded the smartphone payment service in Japan. Our biggest competitor is "cash". We seek people who can accept this challenge positively, brush up the product at a tremendous speed, and promote PayPay with professionalism and passion.

Job Description

The PayPay Product Security team is seeking Application Security (AppSec) engineers to work with our development teams on maintaining the security of our services.

PayPay Product Security team is responsible for driving the application security and infrastructure security changes within the product division - the part of PayPay responsible for development and operations of the PayPay app. Specifically AppSec engineers focus on supporting our development teams through discovery, knowledge sharing and the automation of security configuration, testing, verification and monitoring. A strong candidate for AppSec engineer will have a good understanding of software security best practices as well as an understanding of how to apply those principles to systems at scale following the DevOps methodology.

Primary Responsibilities

• Working closely with Security Champions and teams on implementation of security best practices
• Supporting development teams throughout Secure SDLC (design and architecture review, code reviews, manual security assessments)
• Introducing systemic improvements to software security at PayPay (automation, processes, guidelines, secure libraries)

Supporting Responsibilities

• Maintaining up to date knowledge of security best practices
• Assist threat modeling of existing and upcoming products and systems
• Training and mentoring of PayPay staff on security best practices and its practical application
• Maintaining automated systems to assist teams with assessing current security status
• Working in a fast paced environment where projects and prioritization may change frequently but maintaining a secure product is a requirement for all team members

Qualifications

• 3+ years of product security experience
• Experience leading projects tasked with improving product security and/or DevOps security
• Strong teamwork skills and the ability to collaborate with others in a diverse environment
• Enjoy taking up a challenge and driving it to conclusion
• Have excellent written, verbal and interpersonal communication skills. Proficient in either Japanese or English

Preferred Qualifications

• One or more of Javascript/Typescript, Kotlin, Scala and Java
• Experience with securing Android and iOS Applications
• Experience with microservice-based and cloud-native applications
• Experience working in a security position within the fintech industry
• Bilingual in English and Japanese is nice to have, but not required

PayPay 5 senses

• Please refer PayPay 5 senses to learn what we value at work.

Working Conditions 

Employment Status

• Full Time

Office Location

• WFA(Work From Anywhere at Anytime)  
• Remote Job 
• You can live anywhere in Japan 

Work Hours

• Super Flex Time (No Core Time)
• In principle, 10:00am-6:45pm (actual working hours: 7h45m + 1h break)

Holidays

• Every Sat/Sun/National holidays (In Japan)/New Year's break/Company-designated Special days

Paid leave

• Annual leave (up to 14 days in the first year, granted proportionally according to the month of employment. Can be used from the date of hire)
• Personal leave (5 days each year, granted proportionally according to the month of employment)＊PayPay's own special paid leave system, which can be used to attend to illnesses, injuries, hospital visits, etc., of the employee, family members, pets, etc.

Salary

• Annual salary paid in 12 installments (monthly)
• Based on skills, experience, and abilities
• Reviewed twice a year
• Special Incentive once a year *Based on company performance and individual contribution and evaluation
• Late overtime allowance, Work from anywhere allowance (JPY100,000)

Benefits

• Social Insurance (health insurance, employee pension, employment insurance and compensation insurance)
• 401K
• Language Learning support
• Translation/Interpretation support
• VISA sponsor + Relocation support

Other Information:

• PayPay Inside-Out (Corporate Blog) /JP
• PayPay Inside-out (Corporate Blog) /ENG
• PayPay Product Blog /JP
• PayPay Product Blog /ENG