Company: Start
Location: Moscow
Salary: from 350000 to 400000 RUR
Experience: From 3 to 6 years
START: Experience + Potential = New Heights!
START is your opportunity to professionally develop in the field of e-commerce. Here you can fully unlock and realize your potential, achieve great heights. Working with the largest marketplace Wildberries allows us to sell products to millions of customers every day (electronics, home appliances, and household goods).
We are currently forming the technical information security framework for the company and are looking for an Information Security Engineer (AppSec / DevSecOps).
We need a strong technical specialist who can independently build the security of our systems, code, and infrastructure and become a technical expert within the company.
Responsibilities:
- Building and developing the company's technical information security framework;
- Ensuring CRM security;
- Conducting security code reviews of backend code and identifying vulnerabilities;
- Analyzing application architecture, business logic, authentication and authorization mechanisms;
- Controlling the security of databases, access, keys, and other data;
- Ensuring the security of cloud infrastructure and participating in the creation of our own server infrastructure;
- Monitoring the remediation of identified vulnerabilities and re-verification after fixes;
- Analyzing the company's external perimeter, APIs, and integrations;
- Searching for and implementing AI-based tools for analyzing code, data, and information security threats.
Our Expectations:
- Practical experience in Application Security / Information Security / DevSecOps / Security Engineering;
- Deep understanding of web application, backend, and API security;
- Experience with security code review and source code analysis;
- Solid understanding of Python backend will be a big advantage;
- Knowledge of OWASP Top 10 and OWASP API Security;
- Understanding of SQL Injection, XSS, SSRF, IDOR/BOLA, RCE, and other common vulnerabilities;
- Understanding of OAuth2/OIDC, JWT, RBAC, authentication/authorization;
- Experience with SAST, SCA, DAST, secrets scanning;
- Practical experience with Linux, Docker, CI/CD;
- Understanding of Kubernetes and cloud infrastructure;
- Experience building or developing Secure SDLC;
- Understanding of network and infrastructure security;
- Ability to make independent technical decisions and bring tasks to completion.
We Offer:
- Full official employment according to the Labor Code of the Russian Federation from the first working day, official salary;
- Work in a stable company that grows exponentially every year;
- A team of professionals open to new ideas and initiatives;
- High level of income, to be discussed with the final candidate;
- Comfortable working conditions: office within walking distance of Verkhnie Likhobory metro station (1 minute on foot);
- Shortened working day on Fridays;
- Tea, coffee, fruits, and a comfortable working atmosphere.
Skills: Information Security, Python, Information Technology, Implementation of Information Security Systems, Security Audit, AI, CRM
