About Me
I am an Enterprise Security specialist with a career rooted in system engineering. Starting in infrastructure and global project management at MUFG Bank, I transitioned into cybersecurity and have since built expertise across endpoint security, identity, and governance automation. I now lead security engineering at Mercari, where I focus on building "invisible security" — robust compliance that moves at the speed of engineering.
Publications & Talks
Mercari Engineering Blog
- PR-driven macOS config changes with Terraform + GitOps on Jamf Pro — Dec 2025
- macOS Security Hardening with mSCP and Jamf Pro API — Dec 2024
Speaking
- Security Meetup / Cyberriskers — Tenant restriction for generative AI and countering Shadow MCP — Jul 2026
- Chrome Enterprise Security Day Tokyo 2026 — Agentless device management with Chrome and secure Gemini adoption — Jul 2026
- Google Cloud Next (Las Vegas) — Chrome Enterprise — Apr 2026
- JMUG — Jamf Pro Terraform and GitOps adoption — Apr 2026
- Financial ISAC — Developer and Instructor for "Cyber Quest" Incident Response Exercises
Media Coverage
- Google Cloud Blog — Chrome Enterprise Premium drives 50%+ projected cost reduction for Mercari — Nov 2026 (guest post)
- ZDNET Japan — Learning from Mercari: Security in the AI era with VDI-independent data protection and a browser-first approach — Nov 2026 (Japanese)
- @IT — How Mercari supports its company-wide Claude Code rollout and Shadow AI countermeasures — Aug 2026 (interview, Japanese)
Experience
- Security Leadership — Leading cross-functional security strategy, budgeting, and org design; translating technical risk into business impact.
- Zero Trust & Identity — Designing Zero Trust with identity and browser security platforms, feeding device trust signals into context-aware access policies.
- Endpoint Security & Governance Automation — Managing large endpoint fleets with Security as Code (IaC, GitOps) aligned to mSCP and NIST.
- Security Engineering — Building security orchestration and tooling in Python and Go, integrated into engineering pipelines.
- Incident Response & Threat Intelligence — Leading IR, vulnerability management, and SIEM integration; developed cyber exercises for the financial sector ISAC.
- Global Project Management — Managed multi-region core-banking system overhauls under strict regulatory requirements (MUFG Bank).