Company: ЮMoney
Location: Saint Petersburg
Work Experience: 1 to 3 years
Your responsibilities will include:
- Conducting security assessments of solution architectures and service readiness for launch;
- Analyzing reports from SSDLC scanners and bug bounty programs;
- Developing recommendations for vulnerability remediation, assigning tasks to teams, and verifying their implementation;
- Enhancing rules for SSDLC scanners and WAF;
- Building and developing SSDLC processes;
- Drafting information security policies and instructions within your area of responsibility;
- Training and consulting development teams on information security.
We expect you to have:
- Knowledge of secure development principles;
- Experience analyzing application architectures and specific technological processes from a security perspective;
- Skills in identifying and remediating vulnerabilities in web and mobile applications;
- Experience with SAST, DAST, SCA, and WAF tools;
- Knowledge of common authentication protocols and basic cryptography principles;
- Teamwork skills.
Desirable, but not required:
- Ability to understand existing code (Java, JavaScript, TypeScript, Kotlin, Swift);
- Skills in task automation using scripting languages (Python, Go);
- Practical experience with Linux, Docker, Kubernetes.
