Vulnerability Assessment Engineer (Manager / Member)
Background
As our business grows and our systems become more sophisticated and complex, delivering secure services matters more than ever at bitFlyer. As a service handling crypto assets, we are held to a particularly high security standard, and we are further strengthening our vulnerability assessment capability. In this position, we are looking for an engineer who can apply security expertise to raise the quality and safety of our systems overall by conducting vulnerability assessments and proposing improvements.
Responsibilities
Conducting white-box vulnerability assessments of web applications and APIs
Reviewing designs from a security perspective and proposing improvements
Promoting secure-by-design and embedding it into the development process
Raising internal awareness and building the structure to achieve shift-left security
Scope of change in duties: After joining, you may be reassigned to any duties designated by the company.
- Required Skills & Experience
■Japanese (conversational level)
■Hands-on experience in vulnerability assessment of web applications (3+ years)- Preferred Skills & Experience
■English (business level)
■Hands-on experience with white-box vulnerability assessments
■Knowledge of major web vulnerabilities such as SQL injection and XSS
■Understanding of object-oriented programming languages and experience reading code
■Experience coordinating and communicating with external vendors and internal stakeholders
■Experience in security-related work at financial institutions
■Knowledge of web frameworks such as ASP.NET Web Forms and .NET Core
■Participation in security camps, study groups, CTFs, etc.
■Experience reporting vulnerability information to bodies such as IPA and CISA- Who We Are Looking For
- bitFlyer is a multinational team of professionals, bringing together talented members from around the world. We are looking for people who, regardless of age or nationality, think and act with passion and turn ideas into results. We are fully committed to creating the future of next-generation finance and blockchain.
- Salary
■Expected annual salary: ¥6,000,000–¥12,000,000
※Includes a fixed overtime allowance for 45 hours per month
※Determined based on experience, skills, and most recent annual compensation
■Monthly salary breakdown
Base salary: ¥369,800–¥739,800
Fixed overtime allowance: ¥130,200–¥260,200 (for 45 hours)
※If fixed overtime hours are exceeded, additional premium pay is provided for overtime, late-night, and holiday work
※Performance-based bonuses are paid separately- Working Hours
■Employment type: Full-time (no fixed term)
■Probation period: 6 months (no change in working conditions during probation)
■Working hours: 9:00–18:00 (flextime system; core time 10:00–16:00)
■Break: 60 minutes (provided during working hours)
■Overtime work: Yes
■Measures to prevent passive smoking: No smoking indoors- Holidays & Leave
■Two days off every week (Saturday and Sunday) ※Days off may differ when a shift system applies.
■National holidays
■Year-end and New Year holidays
■Congratulatory and condolence leave
■Maternity leave (pre- and postnatal)
■Childcare leave
■Birthday leave
■Annual paid leave (12 days in the first year)- Benefits
■Commuting allowance
■Full social insurance (health insurance, employees' pension, employment insurance, workers' accident compensation insurance)
■Drinks & food
■Massage service
■Visa acquisition support
■Book purchase program
■Language training program
■Babysitter subsidy program
■Friday social gatherings
■Quarterly social events
■Welcome lunch- Work Location
Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo
(Directly connected to Exit 8 of Roppongi Station on the Toei Oedo Line / directly connected via an underground passage to Roppongi Station on the Tokyo Metro Hibiya Line)
※In principle, we currently work on-site at the office.
Scope of change: Any location designated by the company