JD in Japanese follows. 英文の後に和文JDをご覧いただけます。
We are currently taking application from those who graduate after March 2024. 2024年3月以降に卒業される方のインターンシップ応募を受け付けています。
Introduction
Circulate all forms of value to unleash the potential in all people
"What can I do to help society thrive with the finite resources we have?" The Mercari marketplace app was born in 2013 out of this thought by our founder Shintaro Yamada as he traveled the world. We believe that by circulating all forms of value, not just physical things and money, we can create opportunities for anyone to realize their dreams and contribute to society and the people around them. Mercari aims to use technology to connect people all over the world and create a world where anyone can unleash their potential.For more information about Mercari Group’s mission, see Mercari's Culture Doc.
Equal Opportunity Hiring
Here at Mercari, we work to realize a world in which no one’s potential is limited by their background and everyone has the opportunity to freely create value. We also firmly believe that a mindset of Inclusion & Diversity is essential for us to achieve our mission.
This, of course, extends to our hiring practices as well. Mercari is committed to eliminating discrimination based on age, gender, sexual orientation, race, religion, physical disability, and other such factors so that anyone who shares our mission and values can join us, regardless of their background. For more details, please read our I&D Statement.
Position Overview
Work Responsibilities
As an Intern in the Mercari Security Engineering and Strategy Team, you will have the opportunity to participate in security design, process reviews as well as develop and deploy security countermeasures, and execute penetration tests. This is a unique role within Mercari since you will be involved in high-stakes projects across the organization. The candidate will be exposed to the following topics, and will be invited to work on one opportunity of his/her choice:
- Monitoring and log analysis
- Penetration testing, threat modeling and security automation
- Web and mobile application security testing
- Technical project management
For each of these topics, the candidate will need to:
- learn about Mercari’s infrastructure
- create a map representing how systems interact with each other
- understand the underlying code and structure
- conduct supervised experimentation to achieve a decided objective
- describe discoveries, identify for improvements, and present findings to the stakeholders
- cooperate with the system owners to plan improvements
Why would Mercari be a good place to learn about these topics?
- Mercari’s infrastructure relies on current cloud base technology
- the scale of the data and systems that Mercari is using makes it a challenging environment and a unique opportunity to tackle difficult problems
Unique and Bold Challenges
- The Security Engineering and Strategy team at Mercari is responsible for dealing with a vast array of data, logs, and dependencies. As a member of the team, you will be able to employ cutting-edge and complex cloud infrastructure systems to help us tackle complex challenges.
- With a rapidly growing number of organizations and services, it is extremely important for Mercari to introduce automation and reduce dependency on manual work as much as possible. This is an exciting opportunity to gain experience in helping us build out our security systems and solve interesting challenges in a fast-paced environment.
Minimum Requirement
- Shared understanding and belief in our company’s mission and values
- Strong interest in security
- Able to work more than 20 hours per week for 2 or 3 months
- Programming experience with one or more programming languages including but not limited to: Go, Python, PHP, Javascript
- Enrolled in a Bachelor's degree (or higher) program or technical school in Computer Science, Information Security, or other engineering-focused major
- Effective interpersonal and communication skills
- Basic Linux understanding and an ability to operate Linux
- Basic familiarity with SQL Querying
- Able to join our internship from July 2023
Preferred Requirement
- Basic understanding or strong interest in any of the following:
- Public cloud infrastructure platforms (GCP, AWS or Azure)
- Container and orchestration technologies (Docker, Kubernetes)
- Capture the flag (CTF), bug bounty, penetration testing, Web or mobile application security testing,
- Security automation and DevSecOps
- Basic experience with software development tools such as Git, dependency management, build and deployment tools
- Understanding of modern Web or mobile applications
Screening Criteria
- Fundamental engineering skills, including computer and network architecture, operating systems, and protocol understanding
- Coding/scripting skills
- Motivation and ability to learn new technologies
- Teamwork skills in a diverse environment
- For details, please see this page and Mercari Careers Student Page
Language Requirements
English or Japanese: Independent (CEFR-B2) *For details about CEFR, see here
- The Security Team is a diverse team with members from around the globe. Team members have various levels of Japanese and English proficiency and we value mutual effort, understanding, and support, we aim to meet in the middle to make everyone feel comfortable regardless of the member’s native language.
Related Articles
- Development Platforms and Platformers: On Rising to the Global Standard Ken Wakasa, Mercari CTO
- Mercari's Shintaro Yamada discusses what makes a truly strong organization and person
- From New Graduate to Tech Lead in One Year: Changes of an Engineer at Mercari | mercan
- “Youth is a tool.” A Mercari new grad talks about the strengths that paved his career
- Protecting Mercari from Cyberattacks! The Security Team Discusses Who Makes A Good Candidate for the New CSIRT/SOC
Working Conditions
Employment Status
Intern
Office
Roppongi
- Smoking is prohibited within our offices
- Mercari has introduced a work style policy called “Your Choice.” Each member is free to choose whether they want to work in the office or work fully remote. *Exceptions made for certain kinds of work.
Work Hours
- Able to work more than 20 hours per week
- 3 months of Internship is encouraged. Please consult with the recruiter if you prefer shorter/longer period
Salary
- Hourly wage (Salary: Negotiable)
Benefits
- Full transportation coverage
- Custom PC
- Dual screen if needed
- Visa support
- Accommodation for those who are from outside of Tokyo area
Media
Corporate Sites
- Mercari, Inc.
- Merpay, Inc. [Japanese]
- Mercoin, Inc
- Mercari US
Owned Media
- Mercari Careers
- Mercari Engineering Portal
- Mercan - Introduces the people that make Mercari
- Mercari US Careers
- Mercari US Blog
- Mercari engineering blog (Security)
- Youtube:
はじめに
あらゆる価値を循環させ、あらゆる人の可能性を広げる
「地球資源が限られているなか、より豊かな社会をつくるために何ができるか」。2013年、創業者の山田進太郎が世界一周の旅で抱いた課題意識から、フリマアプリ「メルカリ」は生まれました。私たちは、物理的なモノやお金に限らずあらゆる価値を循環させることで、誰もがやりたいことを実現し、人や社会に貢献するための選択肢を増やすことができると信じています。
テクノロジーの力で世界中の人々をつなぎ、あらゆる人の可能性が発揮される世界を実現していきます。メルカリグループの目指すべき方針についてはMercari Culture Docをご覧ください。
選考における機会の平等
メルカリでは、バックグラウンドによって個人の可能性が決めつけられることなく、自由に価値を生みだす機会を手にできる社会の実現を目指しています。そしてメルカリがミッションを実現するために「Inclusion & Diversity」という考え方は不可欠な存在だと考えています。
採用活動においても、メルカリのミッション・バリューに共感する、様々なバックグラウンドの方にジョインしていただけるよう、年齢、性別、性的指向、人種、宗教、身体能力、その他記号に基づくあらゆる差別をなくすことを約束します。
詳しくはI&D statementをご覧ください。
募集要項
業務内容
メルカリのセキュリティ・エンジニアリングチームのインターンとして、セキュリティデザインおよびプロセスのレビューをはじめ、セキュリティ対策の構築・展開、ペネトレーションテストなどに取り組んでいただきます。メルカリのセキュリティエンジニアは、組織全体に影響を及ぼすプロジェクトに関わる社内でも特殊な役割です。候補者は、下記のトピックに関わることができ、いずれかの希望する業務を一つ担当していただきます。
- モニタリングとログ解析・ログ基盤の開発
- ペネトレーションテスト、脅威モデリング、セキュリティ自動化
- ウェブおよびモバイルアプリケーションのセキュリティテスト
- テクニカル プロジェクトマネジメント
各トピックを担当するにあたり、候補者には下記のことが求められます。
- メルカリのインフラについて学ぶ
- 各システムがどのように連携しているかを表した構成図の作成
- 基礎となるコードや構造の理解
- 決めた目標を達成するために他メンバーの指揮監督のもと実験を実施
- 発見事項、改善点、分析結果を関係者に説明および提案
- 改善案を作成するためにシステムのオーナーと連携
これらのトピックを学ぶためにメルカリが適した職場である理由は?
- メルカリのインフラはInfrastructure as codeやコンテナなど、最新のクラウド基盤技術を利用して管理されている
- メルカリが使用しているデータやシステムの規模は大きく、チャレンジングで難しい問題に取り組むことができる
ユニークなチャレンジ
- メルカリのセキュリティエンジニアリングおよびストラテジーチームは、膨大なデータ、ログ、依存関係を扱う役割を担っています。チームの一員として、最先端かつ複雑なクラウドインフラシステムを使用しながら、未知の問いに挑戦することができます。
- 急成長・急拡大する組織とサービスを持つメルカリだからこそ自動化に取り組み、マニュアル作業への依存を減らすことは非常に意義のあることです。速いスピードを維持しながら、セキュリティシステムの構築のみならず課題解決をすることは、とてもエキサイティングな経験を得られると考えています。
必須条件
- メルカリのミッションとバリューに共感していただける方
- セキュリティ分野に対する強い興味
- 2-3ヶ月間、週20時間以上勤務可能な方
- 一つ以上のプログラミング言語で開発経験のある方
- 例:Go、Python、PHP、JavaScriptなど
- コンピュータサイエンス、情報セキュリティ、その他エンジニアリング系の学部・学科を専攻されている方(学士課程以上もしくは専門学校)、または同様のスキルがあること
- 効果的な対人・コミュニケーションスキル
- Linuxに関する基本的な知識とLinuxを運用できる能力
- SQLクエリの基礎知識
- 2023年7月以降にインターン参加可能な方
歓迎条件
- 下記のいずれかの基本的な知識もしくは強い関心:
- パブリッククラウド インフラプラットフォーム(GCP、AWS、Azure)
- コンテナおよびオーケストレーション技術(Docker、Kubernetes)
- Capture the Flag(CTF)、バグバウンティ、ペネトレーションテスト、ウェブもしくはモバイルアプリケーションのセキュリティテスト
- セキュリティの自動化およびDevSecOps手法
- Git、依存関係管理、ビルド・デブロイツールなどのソフトウェア開発ツールを使った基本的な経験
- 最新のウェブもしくはモバイルアプリケーションの知識
選考のポイント
- コンピュータやネットワークアーキテクチャ、オペレーティングシステム、プロトコルの知識などの基本的なエンジニアリングスキル
- コードやスクリプトを書くスキル
- 新しい技術を学ぶ意欲と能力
- 多様な環境で働くための高いチームワーク力
- 詳しくは下記をご参照ください
語学力
英語もしくは日本語:Independent (CEFR - B2)
※CEFRの詳細については、こちらをご覧ください
- セキュリティチームはとても多様性に富んだチームで、さまざまな国籍のメンバーで構成されています。チームメンバーの日本語力・英語力はさまざまで、お互いの努力、理解、サポートを大切にしながら、母国語に関係なく誰にとっても心地よい環境構築に努めています。
関連記事
- Security | Mercari Engineering blog
- Security | mercan
- 新時代のセキュリティとエンタープライズをつくるために——新CIOと現CISOが共に描く未来
- プロダクトライフサイクルのあらゆるフェーズを支援するProduct Securityチーム。メンバーの共通点は「好奇心」
- 次に何が起こるかのリスクを正しく探る。メルカリCSIRTが「脅威インテリジェンスリサーチ」を他人任せにしない理由
- “0→1”フェーズの苦悩も醍醐味も味わった、メルカリの情報セキュリティガバナンスチームが今思うこと
- 情報資産を可視化して、リスクを評価し、ルールを作る──メルカリのセキュリティ文化を構築したGo Boldなプロジェクト
- セキュリティの専門家集団の旗振り役を担う。Security Strategyが目指す、スケーラブルな組織づくり
- 改正法対応から社内浸透まで。プライバシーのプロフェッショナル集団「Privacy Office」の中の人たち
- 仮想チーム「CISO Office」が始動。設立背景からチームミッションまで余すことなく公開
- 新メルカリCISOに元LINE市原尚久が就任「歴史の1ページつくる感覚」世界一セキュアなマーケットプレイス確立に挑む
- Terraform CIでのコード実行制限
- メルカリでのDetection EngineeringとSOAR
- ダイバースを越えた「ボーダレス」へ。メルカリ・セキュリティチームの組織カルチャーと実践
雇用条件
雇用形態
インターン
オフィス
六本木
- 受動喫煙対策: 屋内全面禁煙
- メルカリには「YOUR CHOICE」というワークスタイルに関する制度があります。オフィス出社をすることも、フルリモートワークを選択することも自由に選択することができます。※一部職種を除く
勤務時間
- 週20時間以上の勤務が可能な方
- 期間は約3ヶ月を目安としておりますが、難しい場合はご相談ください
給与
- 時給制(時給:応相談)
ベネフィット
- 交通費全額支給
- 入社時に希望のノートPC貸与
- デュアル・ディスプレイ希望者貸与
- ビザサポート
- 遠方からご参加される方には宿泊地を手配
メディア
コーポレートサイト
オウンドメディア
Other Jobs from Mercari
Software Engineer - Mercari
Software Engineer - Mercari/Merpay/Mercoin/Mercari Hallo (Internship)
Research Project Manager - Mercari/R4D
Software Engineer, Site Reliability - Mercari/HR領域新規事業 (Mercari Hallo)
QA Engineer - Mercari/HR領域新規事業 (Mercari Hallo)
Similar Jobs
Senior Engineer – Digital Experience DOTCOM (REMOTE)
Senior Solutions Engineer - Channel
Software Engineer AI/ ML- Co-Op (PEY/ Masters)
Senior Production Unreal Engine Systems Reliability Engineer (PH)
Staff Data Engineer
There are more than 50,000 engineering jobs:
Subscribe to membership and unlock all jobs
Engineering Jobs
60,000+ jobs from 4,500+ well-funded companies
Updated Daily
New jobs are added every day as companies post them
Refined Search
Use filters like skill, location, etc to narrow results
Become a member
🥳🥳🥳 401 happy customers and counting...
Overall, over 80% of customers chose to renew their subscriptions after the initial sign-up.
To try it out
For active job seekers
For those who are passive looking
Cancel anytime
Frequently Asked Questions
- We prioritize job seekers as our customers, unlike bigger job sites, by charging a small fee to provide them with curated access to the best companies and up-to-date jobs. This focus allows us to deliver a more personalized and effective job search experience.
- Salaries for the engineering jobs on our site range from $100K-$200K. On average, senior engineer positions on our EchoJobs are about $160K.
- The EchoJobs positions have been sourced and vetted from the top companies to work for in the US as a software engineer, including LinkedIn and other reputable job sites. We also have syndicated jobs from companies that have just raised funding, as well as those that have great unique products and culture. From all of these sources, our founder, Morgan, has also resourced the company's authenticity in terms of their website, public appearance, and more.
- Yes, our users asked us for just this, so now our search filters allow you to search for your top jobs via location, as well as by onsite, remote, or both. Approximately 30% of our jobs are remote, so you’ve got the best options for you!
- We have not yet implemented this option, but are considering doing so in the future. For the moment, you would need to cancel your subscription, and resubscribe when you wanted to come back.
- We add new jobs to EchoJobs every day! We scan our sources for the newest jobs, verify them, and post them to EchoJobs within minutes. We add about 2,000-3,000 new jobs for you each day!
- From starting your job search to getting hired, the entire job search process can take us software engineers anywhere between 3-6 months. However, at EchoJobs, we’re striving to shorten this duration by finding the best, newest jobs for you, so you can do less job searching, and more applying.
- We’d recommend checking EchoJobs daily, as we add new jobs to the site each day. Additionally, if you got a chance to read our previous email on “what makes EchoJobs different from any other job search tools,” we also recommended that you set a job alert based on your job filters, so if you get emails on those new jobs, you could be checking more than once per day.
- If you decide to continue with us after the 1-month trial, we definitely recommend this, as we all know it usually takes 3-6 months to find a quality job as a software engineer these days. So to best support you, we just adjusted our membership options at EchoJobs to monthly, 3 months, or 12 months (this option is more for passive job seekers looking a little bit for the future if they want to come back to work or make a job switch potentially. This lets you see what’s out there in case an even better fit job becomes available.)
- EchoJobs is truly the only job site of its kind. We want to be THE spot for you to find the best job for you, and haven’t encountered any other company doing this. Other job sites are in niches besides software engineering or focus on a small portion of engineering jobs (like a specific coding language). In the words of Morgan, our founder, “I think what makes EchoJobs different is the amount of jobs, frequency that we add new jobs (we add 2,000-3,000 new jobs daily!), and the powerful search engines to find exactly the job you want more easily and efficiently. We can provide you with the most jobs that are vetted by us, we’ll continually find more new jobs for you, and we make it easier for you to apply and get hired.
What Fellow Engineers Say