M

Mercari

Peer-to-peer mobile marketplace for secondhand goods

Security Engineer Intern

Security Engineering & ArchitectureConfirmed live in the last 24 hours
InternshipMinato City, Tokyo, JapanNo salary listed

About the Job

Requirements

  • Applicants must be enrolled in a Bachelor's degree or higher program, or technical school, in Computer Science, Information Security, or another engineering-focused major.
  • Applicants must have a strong interest in cybersecurity and engineering.
  • Applicants must be available to work 20 or more hours per week for 2–3 months.
  • Applicants must have programming experience in one or more languages, including Go, Python, PHP, or JavaScript.
  • Applicants must have basic familiarity with Linux, including common commands and scripting.
  • Applicants must have foundational knowledge of SQL and data querying.
  • Applicants must have independent English or Japanese proficiency at CEFR B2 level.

Responsibilities

  • Participate in threat modeling, code reviews, and security testing under senior engineers' guidance to help identify and reduce risk in Mercari's systems.
  • Develop or enhance automation scripts for security tasks such as compliance checks, asset inventory reconciliation, and alerting.
  • Conduct supervised security research, summarize findings, and propose actionable improvements for Mercari.
  • Support vulnerability management by helping triage security findings, verify issues, and coordinate remediation with developers.
  • Contribute to internal documentation, including secure development guidelines, AI security best practices, security playbooks, and engineer onboarding materials.
  • Assist with security monitoring, including analyzing logs to detect anomalies, tuning detection rules, and tracking misconfigurations or policy violations.

Desired Qualifications

  • Experience attending or speaking at domestic or international security conferences, such as SECCON, Hardening Project, Black Hat, or DEF CON.
  • Hands-on security experience, such as participating in CTF competitions, bug bounty programs, or penetration testing.
  • Knowledge of web or mobile application security testing.
  • Familiarity with public cloud platforms such as GCP, AWS, or Azure.
  • Familiarity with containers and orchestration technologies such as Docker and Kubernetes.
  • Knowledge of security automation and DevSecOps.
  • Experience leveraging AI for security operations automation or protecting AI-driven systems.
  • Basic experience with software development tools such as Git, dependency management, and build and deployment tools.
  • Understanding of modern web or mobile applications.

About the Company

Mercari

Peer-to-peer mobile marketplace for secondhand goods

Mercari operates a mobile peer-to-peer marketplace for buying and selling secondhand goods. Users list items by taking photos in the app, and buyers complete purchases there, with payments held in escrow until receipt is confirmed. Revenue comes from seller fees (10% in Japan; 10% plus 3.6% buyer protection in the US), plus Merpay payments and promoted listings, plus shipping partnerships for integrated delivery. The platform differentiates itself through a simple mobile experience, escrow and buyer protection, shipping integration, and a broader marketplace including Mercari Shops for sellers, with a goal of extending product life and supporting a circular economy.

Company size
1,001-5,000
Company stage
IPO
Headquarters
Tokyo, Japan
Founded
2013

Recently Posted Jobs

Explore more opportunities at Mercari

See more jobs