Senior Software Engineer, Dynamic Security Testing - Woven Planet Holdings, Inc. Nihonbashi, Tokyo Bookmark Share Print 128 0 0

Listing Description

ABOUT WOVEN PLANET GROUP
Woven Planet Group (Woven Planet) represents a carefully curated blend of expertise and resources dedicated to bringing the vision of “Mobility to Love, Safety to Live” to life. Through innovations and investments in automated driving, robotics, smart cities, and more, we are transforming how humankind lives, works, and moves. We exist to design, build, and deliver secure, connected, and sustainable mobility solutions that benefit all people worldwide. Founded in 2018 as Toyota Research Institute - Advanced Development (TRI-AD), Woven Planet is composed of four complementary companies: Woven Planet Holdings, Woven Core, Woven Alpha, and Woven Capital.

Visit us to learn more: https://www.woven-planet.global/

TEAM
The security team at Woven Planet is on the cutting edge of many challenging security problems. We identify emerging security threats in production applications and services, autonomous vehicles, and IoT devices via dynamic security testing. We work closely with internal platform teams to deploy safe and secure services through tooling and automation, allowing developers to innovate quickly without compromising security. 

WHO ARE WE LOOKING FOR?
We are looking for engineers who are passionate about architecting well designed tools to improve Woven Planet’s cybersecurity program, scale up the security team’s capabilities, and help engineering teams secure their products. Examples include the creation of web application scanners, fuzzers, and implementing re-usable security automation frameworks. This position will require a skill of building strong partnerships with other security and engineering teams, as well as a customer-focused mindset. The right candidate will have a mix of software development and security engineering skills. We expect strong experience in one of the fields, and working knowledge and interest to learn in the other.

We are looking for someone with:  
・solid coding skills, broad knowledge of software development, and an understanding of application security fundamentals
・extended application security or red teaming experience with basic coding skills

RESPONSIBILITIES
・Build and maintain a variety of software that Woven Planet uses to improve our security posture. 
・Lead the design, engineering, deployment, and maintenance efforts of software for dynamic security testing (web application discovery and scanning, binary fuzzers, etc.).
・Evaluate dynamic testing tools.
・Collaborate with other security and engineering teams to identify repetitive tasks that can be automated.
・Identify application security risks, define requirements, and then build and extend systems to help reduce and track these risks.
・Guide and mentor other engineers in proper engineering practices through code review and other practices.
・Be a role model for other engineering teams at the company in secure engineering practices.

MINIMUM QUALIFICATIONS
・3+ years combined experience in either or both:
   ・information security (e.g. threat modeling, secure code review, security testing)
   ・software development experience using common programming languages, such as Go, Rust, Python, Ruby, C/C++, or Java.
・Creative problem-solving skills and excellent troubleshooting and debugging skills.
・Expertise in writing clean, well-tested, and maintainable code.
・Ability to lead engineering projects that are very broad, ambiguous, and/or complex by using a mix of technical and organizational skills.
・Business-level verbal and written communication skills in English (e.g. TOEIC 800+ or equivalent experience).

PREFERRED QUALIFICATIONS
  • Experience in the design and implementation of security solutions, systems, and mechanisms, including, but not limited to, data security, application security, cryptography, systems security, and network security.
  • Proficient in the following infrastructure and devops technologies: AWS, GCP, Azure, Docker, Terraform, GitHub Actions, Kubernetes.
  • Experience with Scrum/Agile development methodologies.
  • Ability to write code that is not only secure but scales to a large number of users and systems.
  • In-depth understanding of security automation tools and processes.
  • In-depth understanding of modern software engineering practices and secure software development best practices.
  • Strong experience writing unit and integration tests along with clear documentation.
  • If you are currently located outside of Japan, don't worry, we'll set an interview over Google Hangout Meet or Skype.


    Listing Details

    • Citizenship: Not Provided
    • Incentives: Not Provided

     

    • Education: Not Provided
    • Travel: Not Provided
    • Telework: Not Provided



    About Us

    NinjaJobs is a community-run job platform developed by information security professionals. Our unique approach of focusing strictly on cybersecurity positions allows us to personalize the user experience.

    Our Contacts

    1765 Greensboro Station Pl.
    Suite 900
    Tysons Corner Va 22102

    (703) 594-7765