About the company
BitFlyer is a prominent global cryptocurrency exchange founded in 2014 by Yuzo Kano, headquartered in Tokyo with US and European subsidiaries. Known for high security, it is one of the few platforms licensed to operate in Japan, the US, and Europe, offering spot trading for Bitcoin, Ethereum, and more with high liquidity.
Job Summary
About the role:
bitFlyer is a prominent global cryptocurrency exchange founded in 2014, headquartered in Tokyo with US and European subsidiaries. One of the few platforms licensed to operate in Japan, the US, and Europe, bitFlyer offers spot trading for Bitcoin, Ethereum, and more with high liquidity.
As bitFlyer continues to grow and enhance its systems, building a more robust and strategic security framework has become a top priority. We are looking for a Security Engineer with advanced technical expertise and audit-readiness to help mitigate internal and external risks and support the safe and reliable operation of our services.
Responsibilities:
šConduct security reviews of web applications and infrastructure. šPrepare for and respond to internal and external audits; develop and maintain security guidelines. šPlan, execute, and analyze security risk assessments and vulnerability scans. šRespond to security incidents and develop/implement recurrence prevention measures. šPromote security awareness through collaboration with internal engineers and stakeholders.
Requirements:
šNative-level Japanese communication skills (including handling audits and documentation). š3+ years of practical experience as a security engineer. šKnowledge of vulnerabilities in web applications and networks. šExperience developing and operating security-related policies and guidelines. šStrong technical writing skills for security reviews and audit responses.
Nice-to-have: šExperience implementing security measures in the financial or crypto asset industry. šExperience designing and operating security in cloud environments (AWS, Azure, GCP). šHands-on experience with security tools such as WAF, SIEM, IDS/IPS. šBusiness-level English communication skills (e.g., collaboration with global teams). šRelevant certifications such as Registered Information Security Specialist (RISS), CISSP, or CISA.
If this role isn't the perfect fit, there are plenty of exciting opportunities in blockchain technology, cryptocurrency startups, and remote crypto jobs to explore. Check them on our Jobs Board.


