Application Security Engineer - OWASP/Threat Modeling
Description
Language Requirements :
- Professional proficiency in Japanese (JLPT N2/N1 or equivalent) for technical discussions and documentation.
- Fluent Japanese language skills (spoken, written, and presentation) with the ability to independently conduct technical and business discussions.
- Good understanding of Japanese business culture, business etiquette, and stakeholder management.
Professional Experience :
- 7+ years of experience in Application Security, Product Security, or Secure Software Development.
- Strong expertise in OWASP Top 10, API Security, Secure SDLC, Threat Modeling, Secure Coding, and DevSecOps.
- Hands-on experience with SAST, DAST, SCA, code reviews, and penetration testing.
- Experience securing web, mobile, API, and cloud-based applications.
Key Responsibilities :
- Lead comprehensive threat modeling exercises for new and existing features to identify architectural vulnerabilities and proactively design mitigation strategies.
- Orchestrate the integration of automated DAST and SAST tools into CI/CD pipelines to ensure continuous security validation without compromising deployment velocity.
- Conduct deep-dive penetration testing on critical API endpoints and cloud infrastructure to uncover complex security flaws and validate existing controls.
- Champion secure coding practices by providing technical mentorship and security training to development teams, reducing the prevalence of common vulnerabilities.
- Manage incident response efforts and root cause analysis for security-related defects, ensuring rapid remediation and long-term architectural hardening.
- Evaluate and implement emerging DevSecOps technologies to streamline security compliance and visibility across our multi-cloud environment.