Security Specialist (CSIRT)

About Mercari

We believe the world needs a place where people can exchange their loved goods. That’s why we built Mercari—to connect people who want to buy and sell things of emotional value through their mobile phones. Mercari has grown to become a leading community-powered marketplace that brings together millions of people every day.

Mercari Dev Meetups

Position

Our Mission

Mercari is a Japan-based company with the mission of “create value in a global marketplace where anyone can buy & sell.” Having continuously worked toward this goal since our founding in 2013, we are now transforming from a startup into a global player. While this transformation brings its own specific set of challenges, we believe that solving them one after another will allow us to fully achieve our mission. Are you interested in working together to take on these exciting challenges?

Our Culture

Mercari’s culture has been central to the company since our founding, with the three core values of Go Bold, All for One, and Be a Pro. In addition, the “Trust & Openness” value was introduced to embody our culture of mutual trust, where information remains transparent and rules are kept to a minimum. Regardless of how big Mercari gets, our culture is essential to achieving our mission and will be promoted throughout our organization.

Position Overview

What You'll Do

• Mercari Computer Security Incident Response Team (CSIRT) is responsible for leading and managing incident response to security incidents happening in the Mercari group. As a member of Mecari CSIRT, you will be hunting, validating, and remediating security incident risks. In case of incident response, you’ll be planning, managing, and leading required response actions including validation, analysis, investigation, containment, remediation, and reporting with coordination with Security Operation Center (SOC), other security and stakeholder teams
• Additionally, you’ll be contributing to the following responsibilities of Mercari CSIRT 
  • Maintaining and improving incident response communication and reporting structure, documentations, process and operations
  • Planning and facilitating incident response trainings
  • Coordination with third parties to collect threat information
  • Development and automation of forensic/malware analysis lab environment, and building knowledge base of security incident investigation in Mercari group’s environment
  • Threat intelligence collection and research: identifying potential security incident risks including threat actors targeting Mecari group and cyber crimes targeting Mercari customers
  • Planning and leading threat hunting: validating the current monitoring scope and finding possible attack scenarios happening outside of the current monitoring scope

Unique Challenges

• Work on cutting-edge cybersecurity initiatives to protect Mercari’s customer base as a member of the security team at a high-growth company that faces a growing threat of ever more intricate and advanced cyberattacks
• Work with a skilled in-house team to build fundamental solutions and systems to tackle these challenges. Work on security measures for the largest marketplace app in Japan, “Mercari”, and our growing financial service, “Merpay”. Work with state of the art cloud-based and microservices technology including our in-house developed SOAR systemWork with talented team members in a diverse environment with the opportunity to challenge yourself to learn new things
• Work on not only incident response but also proactive and advanced functionalities of CSIRT including threat intelligence and threat hunting with coordination with various teams in Mercari group

Your qualification

• Shared understanding and belief in Mercari Group mission and values　 Incident handling and remediation experience as a CSIRT or security team member or experience of forensic analysis, incident commander, or incident response process design as a security service consultant
• In-depth knowledge of IT infrastructure (in particular cloud-based infrastructure) - cloud based technologies, container-based applications, networks, servers, authentication, directory services, endpoint management, etc.
• Communication skills for effective coordination with SOC and other teams and accurate reporting to stakeholders and management
• Passion to build the best CSIRT together in a tech company aiming to expand to global scale with cutting-edge technologies and platforms
• Strong interest in planning, leading, or contributing to advanced CSIRT functionalities including threat intelligence, threat hunting, and forensic/malware analysis lab environment

Will be a plus

• 4+ yrs of experience in at least one major domains of security
• Experience of establishing or managing CSIRT or SOC
• Using SQL to conduct log investigations using data analytics platforms such as BigQuery
• Hands-on experience of microservice architecture, Docker, Kubernetes, or container orchestration technologies
• Knowledge and experience of cloud-based infrastructure security (GCP, AWS, etc.)
• Experience of digital forensics and malware analysis
• Experience of security analysis (penetration testing, web application security testing, vulnerability testing, threat modeling, etc.)
• Knowledge and experience of version management, IDE, CI/CD tools and other tools related to the software development process
• Programming experience of tool development or process automation with one or more programming languages including but not limited to: Go, C/C++, Python, Perl, Ruby, PHP, and Javascript

Screening Criteria

• Ability to appropriately handle security incidents as part of an incident response team
• Ability to adequately investigate and analyze logs/data
• Passion for new technologies, security trends, and automation
• Passion for Mercari / Merpay’s services, values, and mission
• Ability to communicate effectively across different departments
• High level of ethics and analytical thinking
• Proactive and innovative approach to identifying and tackling problems
• Self-motivated and able to perform independently
• Ability to multi-task and perform well under pressure
  *Check here for more details

Language Requirements

• Either of the following is required
  • a. English: Independent (CEFR - B2) / Japanese: Basic (CEFR - A2) optional
  • b. English: Basic (CEFR - A2) preferred / Japanese: Independent (CEFR - B2)
• Click here for more information about CEFR

What we offer

Employment Status

Full-time

• Probationary period: First 3 months after joining the company (During this period your contract conditions will be the same as that of a permanent employee)

Office

Roppongi

• Smoking is prohibited within our offices
• Mercari has introduced a work style policy called “Your Choice.” Each member is free to choose whether they want to work in the office or work fully remote.
  *Exceptions made for certain kinds of work

Work Hours

• Full flextime (no core time)
  *Does not apply to all positions

Holidays

• Two days off per week (as well as national holidays, New Year's break, etc.)
• Paid leave, congratulatory and bereavement leave, relax days, sick leave

Salary

• Annual salary paid in 12 monthly installments (including fixed overtime allowance)
• Based on skills, experience, and abilities
• Reviewed twice a year

Benefits

• Complete health and social insurance
• Incentive program
• Language learning support
• Support systems, including those that benefit employee family members
• Translation/interpretation support
• *See this page for details

Support

• Relocation Support
  *See this page for details

Additional details

Media

Corporate Sites

• Mercari, Inc.
• Merpay, Inc. [Japanese]
• Souzoh, Inc.
• Mercoin, Inc. [Japanese]
• Mercari US

Owned Media

• Mercari Careers
• Mercari Engineering Portal
• Mercan - Introduces the people that make Mercari
• Mercari US Careers
• Mercari US Blog