Platform Security Engineer - Mercari
Core
Strengthening the resilience and security posture of Mercari's foundational platform through automation and compliance with security best practices.
Role type
Platform Security Engineer
Builds
Secure-by-default platform for Mercari's marketplace services
Domain
E-commerce marketplace security, cloud infrastructure
Deliverable
production ML models | infrastructure
Required skills
core computer security concepts (CIA triad, least privilege, auth vs authorization, cryptography, security protocols, app security), Git/GitHub/CI-CD tools, shell scripting, Go/Python/TypeScript, public cloud platforms (GCP/AWS/Azure), container technologies (Docker/Kubernetes), Infrastructure as Code (Terraform), UNIX-like systems administration
Preferred skills
4+ years security experience, cloud/web app architecture, Secure SDLC/SLSA, SQL, applied cryptography, networking (TCP/UDP/DNS/HTTP), identity federation (OIDC/SAML), PCI-DSS standards
Technologies
Go, Python, TypeScript, GitHub Actions, Terraform, Docker, Kubernetes, GCP, AWS, Azure, BigQuery, Postgres
Responsibilities
Automate security controls and monitoring, develop technical solutions to prevent/mitigate vulnerabilities, maintain technical and security standards for production infrastructure, collaborate with security management/legal/auditors, work with platform engineering teams to balance security with other requirements, review architecture proposals and propose security controls
Seniority
Mid-Senior, hands-on IC