Language Requirements :

- Professional proficiency in Japanese (JLPT N2/N1 or equivalent) for technical discussions and documentation.

- Fluent Japanese language skills (spoken, written, and presentation) with the ability to independently conduct technical and business discussions.

- Good understanding of Japanese business culture, business etiquette, and stakeholder management.

Professional Experience :

- 7+ years of experience in Application Security, Product Security, or Secure Software Development.

- Strong expertise in OWASP Top 10, API Security, Secure SDLC, Threat Modeling, Secure Coding, and DevSecOps.

- Hands-on experience with SAST, DAST, SCA, code reviews, and penetration testing.

- Experience securing web, mobile, API, and cloud-based applications.

Key Responsibilities :

- Lead comprehensive threat modeling exercises for new and existing features to identify architectural vulnerabilities and proactively design mitigation strategies.

- Orchestrate the integration of automated DAST and SAST tools into CI/CD pipelines to ensure continuous security validation without compromising deployment velocity.

- Conduct deep-dive penetration testing on critical API endpoints and cloud infrastructure to uncover complex security flaws and validate existing controls.

- Champion secure coding practices by providing technical mentorship and security training to development teams, reducing the prevalence of common vulnerabilities.

- Manage incident response efforts and root cause analysis for security-related defects, ensuring rapid remediation and long-term architectural hardening.

- Evaluate and implement emerging DevSecOps technologies to streamline security compliance and visibility across our multi-cloud environment.