Security Engineer

About SmartNews

News should be for everyone. But not when it’s buried under cat videos—or when your internet is spotty—or when it’s in a filter bubble. That’s why we created SmartNews.

Our mission is to discover and deliver quality stories to the world. To accomplish this:
We are a machine learning company. News should be impartial, trending and trustworthy. Our algorithms evaluate millions of articles, social signals and human interactions to deliver the top 0.01% of stories that matter most, right now.
We love content. News should be sustainable. We support quality journalism and respect publishers by sharing article traffic and revenue.

Position

Responsibilities

• Execute proactive threat modeling and implement measures to strengthen the preventative controls of our cloud infrastructure
• Create techniques and tools for the automated detection of malicious activities
• Coordinate our response procedures during active security incidents
• Empower engineers by conducting regular security incident response trainings creating an environment of security awareness
• Support a shift left on security by implementing modern security best practices into our self-service toolings
• Evaluate and utilize modern cloud security offerings to provide a cost effective security stance

Your qualification

• Strong familiarity with the most common web application security risks as listed by the CWE Top 25 and OWASP Top 10
• Experience in addressing vulnerabilities in Linux/Unix operating systems and the TCP/IP network stack
• Ability to perform root cause analysis on past security incidents to recommend improvements
• Skills in at least one programming or scripting language, such as Go, Java, Python, JavaScript, or Ruby
• Practical knowledge of fundamental AWS services
• Business level communication in English

Will be a plus

• Competencies in privacy regulation frameworks, the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR)
• Strong knowledge of the AWS suite of security-related services with a certification as an AWS Security Specialist
• Experience with the operation of cloud-based infrastructure and API security using services such as AWS EC2 security groups, AWS Web Application Firewall, or AWS Shield
• Past work experience with cloud-based security services like AWS Security Hub, Amazon GuardDuty, Amazon Inspector, Amazon Detective, or AWS Config
• Skills in infrastructure-as-code technologies, such as Terraform or CloudFormation

What we offer

• SmartKitchen - Healthy lunch on a daily basis for free (Tokyo Office)
• ChikyuCoffee - Delicious coffee provided by our Barista every day (Tokyo Office)
• Event space - Free use for any kind of meet up (Tokyo Office)
• Foreign language development support
• Various social insurance benefits included
• Full transportation coverage