Security Engineer (vulnerability assessment) / Application Security

Job Summary

Security assessment department, under security engineering division, carries out various activites to prevent vulnerabilities in service developed by LY Corporation.  These activities includes perform graybox test directly or collaborate with developers to safely patch discovered vulnerabilities with other departments.

Responsibilities

  • Performs technical security assessment, code audit, security consulting.
  • Develop security solution to mitigate security vulnerability impact.
  • Enhance security level throughout LY Corporation.
  • Conduct research to identify new attack vectors against product and service of LY Corporation.
  • Identify vulnerabilities by static/dynamic testing.
  • Red team/penetration test operations against LY Corporation internal service.
  • Analyze vulnerabilities discovered both internally and externally and conduct impact assessments.
  • Communicate with developers and guide them to appropriate patch.

*Scope of Change: There is a possibility of reassignment to any duties as determined by the company.

Ideal Candidate

  • Strong Passion for Application Development and Security
    • Demonstrates enthusiasm for integrating security into the entire development lifecycle and proactively identifying potential vulnerabilities.
  • Up-to-Date on Security Technologies and Emerging Threats
    • Keeps pace with rapidly evolving security trends, vulnerabilities, and patch information, and applies this knowledge to both development processes and products.
  • Excellent Communication and Teamwork Skills
    • Collaborates effectively with developers, infrastructure teams, product managers, and other stakeholders to define challenges and implement optimal security solutions.
  • Proactive Problem Identification and Resolution
    • Takes initiative to identify and address security issues discovered during assessments, proposing and executing effective countermeasures.

Required Skills & Experience

  • Bachelor's degree in Computer Science, or a related technical field, or equivalent practical experience.
  • 3 years of experience in application-level vulnerability testing and code-level security auditing.

Preferred Skills & Experience

  • Master's degree in Computer Science or a related technical field.
  • Relevant work experience in web application security.
  • Software development experience in C++ or Java.
  • Foundation in, and in-depth technical knowledge of, security engineering, computer and network security, authentication, security protocols, and applied cryptography.
  • Self-motivated and results-oriented.
  • Effective interpersonal and communication skills.
  • Public research, blogging, presentations, bug bounty, etc.

Salary

Expected annual salary: JPY 8,000,000 to JPY 10,000,000
Form of salary: Monthly salary (including fixed overtime allowance)
Standard monthly salary: JPY 534,000 to JPY 667,000
(Breakdown of standard salary)
 ―Base salary: JPY 414,000 to JPY 518,000
 ―Fixed overtime allowance: JPY 119,000 to JPY 150,000

Fixed overtime allowance of 35 hours will be provided, regardless of whether overtime work is performed.
 Note 1: Overtime allowance is paid separately for overtime work in excess of the fixed 35 hours.
 Note 2: Names of items related to monthly salary vary depending on the grades.
 Bonuses are granted a maximum of two times a year. The amount is determined by factors including the company's and your department's performance.

Allowances

Overtime allowance, commuting allowance,*1 LY Corporation Working Style allowance,*2 etc.

*1 You will be paid for the number of days you actually came to the office. (Maximum of JPY150,000/month)
*2 Allowance to improve your remote work environment (JPY11,000/month)

Type and Period of Employment

Full-time employee (no fixed term of employment, with a 3-month probationary period)

*No changes to the terms of employment during the probationary period.

Work Location

Kioicho Office (Kioi Tower, 1-3 Kioicho, Chiyoda-ku, Tokyo)

*You may be required to report to your assigned office based on work instructions. Initially, the office you report to will be your assigned location. Afterward, there is a possibility of reassignment to any business location determined by the company.
*The offices are wheelchair accessible.
*Note on measures against passive smoking: In principle, no smoking indoors (smoking rooms are available).

Work Hours

  • Flextime system: standard work hours 7 hours 45 minutes (no core hours)
    • Start and end times are up to the individual. However, the company's standard working hours are from 9:30 a.m. to 6:15 p.m.
  • Shortened working hours are available for childcare and caregiving purposes.

*Some departments may operate on the standard work hours (9:30 a.m. - 6:15 p.m.), while others may have a shift schedule.

Holidays and Leave

  • Days Off: Two days off per week (Saturdays and Sundays*1), national holidays, New Year's holiday (December 29 to January 4)

  • Leave: Paid leave, special paid leave (for condolence, maternity, sick childcare, nursing care, legally-designated communicable disease, etc.), Happy Friday*2, sabbatical leave

*1 May differ depending on department.
*2 When a public holiday falls on a Saturday, employees will be given the previous business day off.

Benefits

Comprehensive social insurance (health insurance, nursing care insurance, welfare pension insurance, employment insurance, workers' compensation insurance), Optional Defined Contribution (DC) Pension Plan, Comprehensive Welfare Group Term Insurance, Group Long-term Disability, Employee Savings Program, Cumulative Stock Investment Program, subsidy for re-examination after regular basic/comprehensive health checkup, in-house massage room, club activities, subsidy for employee social events, and more

Talent Development/Support Systems

Training for Employees, Language Courses, Management Training, LY Corporation Job Challenge, Sabbatical Leave, Doctoral Studies Support Program, and more

Selection Process

  • Step1

    Application

  • Step2

    Coding test/Assignment

  • Step3

    Interviews/ Background Check

  • Step4

    Offer

How to Apply

Please fill out and submit the application form. To assess your eligibility for the position, we kindly ask you to provide the necessary personal information on the application form. Please note that this information will only be used for recruitment purposes. Please also note that your resume or other submitted documents will not be returned.

Document Screening

You will be notified of the results of the selection process within two weeks at the e-mail address you entered in the application form, regardless of whether your application is accepted or not. It may take about one week longer if the application period falls during the Golden Week and the New Year holidays.

Interview, aptitude test, technical test, compliance check/reference check

Applicants who pass the document screening will be required to undergo multiple interviews, aptitude/technical tests, compliance checks, and reference checks, although the details vary depending on the position.

You will be notified of the results of the selection process within two weeks at the e-mail address you entered in the application form, regardless of whether your application is accepted or not.

The schedule will vary depending on interviews and other factors, but if everything goes smoothly, an internal offer will be made within about four to six weeks after the application is submitted. Please note that we will not respond to inquiries regarding the details or criteria of the selection process or the reasons for the results, regardless of the results of your application.

Apply

Related Positions

Page top