We use cookies to run the site and count visits. "Got it" also allows session recording.
Профи.ру
Moscow, Russia2 days ago
Grade
Head
An email or a Telegram message to the recruiter
In the first three months:
In the next six to twelve months:
Product development uses React, React Native, TypeScript, and PHP. The infrastructure is in-house; applications and services run on Kubernetes
You don't need to program in these languages for this role. It's important to be able to understand code from a security perspective: read it, find potential vulnerabilities, and discuss risks with developers
Strong practical experience in AppSec or Product Security. You know how to conduct architecture and code reviews, find vulnerabilities, and participate in penetration tests. You not only build processes but also dive into technical tasks yourself
Deep understanding of web application security and their business logic. You know how to find vulnerabilities, assess real attack scenarios, and prioritize fixes
Experience with application and code security. A significant part of the backend is written in PHP, so it's important to be able to read such code and understand its characteristic risks. You won't need to write production code in PHP
Experience in developing security processes in a product company. You know how to integrate security checks and requirements into development so that they work in practice
Ability to negotiate with different teams. You will need to explain risks to developers, infrastructure, legal, and partners, consider their constraints, and find solutions together
Ability to work with uncertainty. You can independently set priorities, choose approaches, and make decisions when there is no established process or clear answer
О роли:
Технологии:
Что предлагают:
Чем предстоит заниматься:
В первые три месяца:
В ближайшие полгода-год:
Что нужно, чтобы присоединиться к проекту:
Отклик на вакансию через Телеграм (по кнопке "Откликнуться").
We compare skills, grade, work format and salary
Most often 346,000 to 603,000