Product Security - Infrastructure Security Engineer

Position Overview

• Location Type: Remote
• Employment Type: Full-time
• Salary: Not specified

PayPay is a FinTech company that has grown to over 65M (as of August 2024) users since its launch in 2018. Our team is hugely diverse with members from over 50 different countries.

OUR VISION IS UNLIMITED_ We dare to believe that we do not need a clear vision to create a future beyond our imagination. PayPay will always stay true to our roots and realize a vision (future) that no one else can imagine by constantly taking risks and challenging ourselves. With this mindset, you will be presented with new and exciting opportunities on a daily basis and have the opportunity to grow and reach new dimensions that you could never have imagined. We are looking for people who can embrace this challenge, refresh the product at breakneck speed and promote PayPay with professionalism and passion.

Please note that you cannot apply or be selected in parallel with PayPay Corporation, PayPay Card Corporation and PayPay Securities Corporation.

Job Description

The PayPay Product Security team is looking for experienced infrastructure security engineers to lead improvements to our infrastructure and operational security, and introduce key security solutions, such as SOAR.

PayPay Product Security team is responsible for driving the application security and infrastructure security changes within the product division - the part of PayPay responsible for development and operations of the PayPay app. A strong candidate for the infrastructure security engineer position will be knowledgeable about modern infrastructure solutions (such as Kubernetes, various public clouds and their services, SQL and no-SQL databases, ElasticSearch, message brokers and so on), security challenges and threats relevant to them, and have experience in one of the following areas:

• Leading projects to improve infrastructure security at scale (e.g. introducing role-based access control, hardening K8s configurations, introducing temporary access credentials for database access, and so on)
• Introducing and improving security orchestration and automation, as well as solution to gather, store and analyze security events and assets

Primary Responsibilities

• Analyzing security risks relevant to the production infrastructure
• Designing security measures for the product infrastructure environment
• Implementing and running security solutions (SIEM, vulnerability management, network security, cloud security, container security, etc.)
• Improve security incident handling within product division.
• Improving observability and monitoring for security information and events.
• Assisting infrastructure teams in prioritizing security goals

Supporting Responsibilities

• Assisting infrastructure teams in implementing and running secure solutions
• Participating in major infrastructure projects as a security expert

Qualifications

• 2+ years of infrastructure security or relevant experience
• Solid understanding of security principles, protocols, and best practices.