[Hiring] DevSecOps Engineer @GAIDOOR株式会社

Role Description

One of our top clients, a well-established Japanese company currently undergoing a major digital transformation within one of Japan’s most important and globally influential industries, is looking for an experienced DevSecOps Engineer to help build and secure its next-generation DX SaaS platform. This position will play a critical role in integrating security into modern software development processes, strengthening cloud infrastructure security, automating security testing, and establishing secure engineering practices across development teams.

You will work closely with Software Engineers, Tech Leads, and Security stakeholders to ensure that applications and infrastructure remain secure without compromising development speed or engineering productivity. Join a new global team driving innovation and making a large societal impact.

Qualifications

• 3+ years of professional experience in at least one of the following: Infrastructure Engineering, Site Reliability Engineering (SRE), DevOps Engineering, Web Application Development.
• Experience building and operating systems on cloud platforms such as AWS, Google Cloud, or Microsoft Azure.
• Experience implementing and maintaining CI/CD pipelines using tools such as GitHub Actions, GitLab CI, or similar solutions.
• Hands-on experience with Docker and Infrastructure as Code tools such as Terraform.
• Understanding of common web application vulnerabilities, including OWASP Top 10, and appropriate mitigation strategies.
• Experience implementing or operating security tools such as vulnerability scanners, SAST, or SCA solutions.
• Practical experience using AI coding assistants such as Claude Code, Cursor, GitHub Copilot, or similar tools in daily development.
• Strong understanding of security principles and secure software development practices.
• Ability to collaborate effectively with Software Engineers, Infrastructure Engineers, and Security stakeholders.
• Proactive approach to identifying risks and implementing practical security improvements.
• Strong problem-solving skills and attention to detail.
• Collaborative mindset focused on enabling development teams rather than unnecessarily restricting them.
• Curiosity, integrity, and commitment to continuous improvement.

Requirements

• Experience operating Kubernetes environments and implementing security configurations such as Pod Security and Network Policies.
• Experience with software supply chain security technologies and practices, including SBOM, SLSA, and Sigstore.
• Experience implementing Policy as Code using OPA, Conftest, or similar tools.
• Experience with SIEM platforms, security log analysis, SOC operations, or CSIRT activities.
• Knowledge of security frameworks such as ISO 27001, ISMS, or NIST Cybersecurity Framework.
• Understanding of AI and LLM application security, including OWASP Top 10 for LLM Applications.
• Relevant security certifications such as AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), Registered Information Security Specialist (Japan).
• Ability to communicate technical topics in English.
• Japanese language proficiency equivalent to JLPT N2 or higher is a plus, but Japanese is not a mandatory requirement. Candidates currently learning Japanese are also welcome.

Benefits

• Employment Type: Full-time employee
• Annual Salary: ¥700,000 – ¥10,000,000 (depending on experience and qualifications)
• Remote Work: Remote-first within Japan (occasional office attendance may be required)
• Flexible Working Hours: Yes
• Core Time: 11:00 AM – 2:00 PM
• Standard Working Hours: 9:00 AM – 5:30 PM (7.5 working hours per day)
• Salary Review: Once per year
• Bonuses: Twice per year (March and September)
• Holidays: Weekends + Japanese National Holidays
• Annual Holidays: Approximately 122 days per year
• Additional Leave: Paid annual leave, summer and year-end holidays, refresh leave, life support leave, and special leave
• Additional Benefits: Full social insurance coverage, transportation expenses covered, retirement benefit program, employee stock ownership program, annual health examinations, employee welfare benefits

Company Description

This company is one of Japan’s most established and respected enterprises, with over 1,000 employees and a remarkable 400-year history in the construction industry. Despite its long history, the company is investing heavily in digital transformation, cloud technologies, and modern software development.

The CEO, who graduated in the United States and is highly committed to innovation, has made a strategic decision to build the company’s first-ever in-house digital and product development organization. To achieve this, he has recruited some of Tokyo’s top technology leaders, including an experienced CTO and CIO.

The company is developing a next-generation digital platform designed to transform how the industry operates by connecting data, people, and processes across multiple business functions. As the engineering organization expands, the company is strengthening its security practices to support scalable, reliable, and secure software development.

The company also has an international presence, with offices in:

• India
• Singapore
• Indonesia
• Vietnam