Experience: 3–6 years
We are currently looking for a Product Security/Application Security engineer who will be responsible for the security of our products at all stages of development — from architecture to CI/CD and artifact delivery. You will be building secure SDLC processes, analyzing the architecture of complex systems, and helping development teams create secure products. This role involves deep dives into architecture, development infrastructure, and modern software supply chain threats.
Required Skills
- secure SDLC
- artifact signing
- SBOM
- dependency security
Responsibilities
- forming and developing secure SDLC processes;
- implementing and configuring SAST/SCA/Secret scanning tools;
- developing security requirements for products and architecture;
- analyzing and improving the security of CI/CD infrastructure;
- implementing artifact signing, SBOM, dependency security practices;
- developing a dependency management policy;
- interacting with development teams at all stages of the product lifecycle.
Candidate Profile
- 5+ years of experience in Application Security/Product Security;
- deep understanding of modern application architectures and common vulnerabilities;
- understanding of Linux internals, network protocols, and OS principles;
- experience with SAST/SCA/DAST tools;
- understanding of CI/CD and supply chain security;
- experience in threat modeling and security design review;
- experience analyzing complex system architectures;
- understanding of secure SDLC principles;
- collaboration skills with development teams.
Bonus Points
- experience working in companies that develop information security products;
- experience in vulnerability research and participation in bug bounty/security research;
- understanding of attacks on EDR, endpoint security, and infrastructure products;
- experience with container security and cloud security;
- experience building a product security program from scratch;
- public speaking, articles, or research in the field of security.
What We Offer
- flexible hybrid work schedule;
- remote work option;
- competitive salary, discussed individually with each candidate and depends on knowledge and experience;
- salary review in line with professional growth;
- opportunity to have maximum impact on the product;
- professional growth, opportunity to work on complex tasks within a unique product;
- opportunity to participate in relevant industry events and conferences;
- high-quality voluntary medical insurance package, day-off pack, etc.
Submit Resume
Send your resume and we will contact you
