Security Engineer

About SmartNews

News should be for everyone. But not when it’s buried under cat videos—or when your internet is spotty—or when it’s in a filter bubble. That’s why we created SmartNews.

Our mission is to discover and deliver quality stories to the world. To accomplish this:

We are a machine learning company. News should be impartial, trending and trustworthy. Our algorithms evaluate millions of articles, social signals and human interactions to deliver the top 0.01% of stories that matter most, right now.

We love content. News should be sustainable. We support quality journalism and respect publishers by sharing article traffic and revenue.

Please note that we will only consider you for one application at a time.

Position

Responsibilities:

• Execute proactive threat modeling and implement measures to strengthen the preventative controls of our cloud infrastructure
• Create techniques and tools for the automated detection of malicious activities
• Coordinate our response procedures during active security incidents
• Empower engineers by conducting regular security incident response trainings creating an environment of security awareness
• Support a shift left on security by implementing modern security best practices into our self-service toolings
• Evaluate and utilize modern cloud security offerings to provide a cost effective security stance

Your qualification

Minimum qualifications:

• Strong familiarity with the most common web application security risks as listed by the CWE Top 25 and OWASP Top 10
• Experience in addressing vulnerabilities in Linux/Unix operating systems and the TCP/IP network stack
• Ability to perform root cause analysis on past security incidents to recommend improvements
• Skills in at least one programming or scripting language, such as Go, Java, Python, JavaScript, or Ruby
• Practical knowledge of fundamental AWS services
• Business level communication in English

Preferred qualifications:

• Competencies in privacy regulation frameworks, the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR)
• Strong knowledge of the AWS suite of security-related services with a certification as an AWS Security Specialist
• Experience with the operation of cloud-based infrastructure and API security using services such as AWS EC2 security groups, AWS Web Application Firewall, or AWS Shield
• Past work experience with cloud-based security services like AWS Security Hub, Amazon GuardDuty, Amazon Inspector, Amazon Detective, or AWS Config
• Skills in infrastructure-as-code technologies, such as Terraform or CloudFormation

What we offer

• SmartKitchen - Healthy lunch on a daily basis for free (Tokyo Office)
• ChikyuCoffee - Delicious coffee provided by our Barista every day (Tokyo Office)
• Event space - Free use for any kind of meet up (Tokyo Office)
• Foreign language development support
• Various social insurance benefits included
• Full transportation coverage