Cybersecurity • 3 to 6 years • Hybrid
RESPONSIBILITIES
- Development and implementation of processes to improve the maturity of secure development;
- Ensuring the integration of secure development tools with DevOps processes;
- Conducting application security analysis using automated tools (SAST/DAST/SCA, Container security), developing and configuring rules;
- Analysis and formation of product security architecture; Coordination of teams to eliminate identified vulnerabilities;
- Increasing the security awareness of development teams;
- Supporting the Bug Bounty program.
REQUIREMENTS
- 5+ years of experience as an AppSec engineer (WEB pentester);
- Knowledge and understanding of the principles of exploitation of threats from OWASP Top 10, CWE Top 25 and protection against them;
- Skills in working with SAST, DAST, SCA/OSA, ASOC, and other tools;
- Understanding the principles of REST/gRPC API design;
- Understanding the principles of K8S operation – operators, webhooks, reconciliation loop;
- Understanding the principles of building secure inter-service communication;
- Experience with containerization tools (Docker, K8S) and automated deployment;
- Basic knowledge of DevOps/DevSecOps fundamentals (system landscape, their purpose, tasks solved, general understanding of processes);
- Experience in analyzing source code and identifying vulnerabilities, at least in Go/Python.
Bonus points:
- OSWE/BSCP certificate;
- Participation in BugBounty.
CONDITIONS
- Employment in accordance with the Labor Code of the Russian Federation;
- Competitive level of compensation (salary + annual bonus);
- Voluntary medical insurance with dental coverage and the option to add children and relatives;
- Transparent motivation system that allows influencing income level;
- Work in a team of professionals;
- Participation in the creation of innovative products;
- Flexible start to the workday, Friday is a shortened workday;
- Office in the center of Moscow;
- Corporate mobile communication;
- Preferential mortgage and consumer lending programs.
What else we offer:
- Opportunities for vertical and horizontal career growth;
- Bonus programs from partner companies;
- Possibility of receiving a bonus for closing a vacancy through your recommendation;
- Financial assistance for the birth of children and other family circumstances;
- Training at the Corporate University at the company's expense;
- Participation in relevant conferences as a speaker or attendee;
- Corporate life: sports communities, interest clubs (board games, intellectual games).
