Step in as the first dedicated security specialist at the company powering a energy trading marketplace. With GTV nearing ¥3 trillion and a ¥5.05B Series B extension closed in January 2026 to accelerate global-grade product development, security investment, and AI adoption on the road to IPO.
You will own product security across the entire portfolio: the trading platform, a market data platform, an energy trading risk management (ETRM) system, and an environmental value marketplace. That covers setting security requirements, planning and driving hardening work, running penetration tests or overseeing external vendors, reviewing application code for vulnerabilities, and building and automating attack detection. The stack is modern (Go/gRPC, React/TypeScript, GCP/GKE, Terraform, Datadog) and the engineering org is AI-forward (Cursor, Devin, Claude). With no security expert in the org today, you will shape the function itself, from guidelines through strategy, as the company hardens for listing.
NEED
- Working knowledge of web application security
- Hands-on security experience such as security reviews and penetration testing
- 3+ years building web services
- Public cloud infrastructure experience
WANT
- infrastructure experience
- Experience building security guidelines or setting and executing security strategy
- Server-side development or microservices operations experience
- Management experience
ENVIRONMENT
- Around ¥15M, DOE
- Remote OK