Alfa-Bank is one of the leading private banks, which is among the systemically important banks of Belarus.
We operate as a fintech company, integrating successful practices in mobile payments, online lending, digital transactions, and other advanced technologies into our business model.
Alfa-Bank currently has over 70,000 business clients and 1,100,000 individual clients.
Today, Alfa-Bank's team consists of over 2900 professionals.
We bring together people with diverse experiences, perspectives, and interests.
Join the team. Together, we can achieve more!
Key Tasks:
- Support and development of the secure development lifecycle SDLC/SSDLC (SAST, DAST, Secrets Findings, SCA);
- Development and enhancement of in-house automation tools;
- Support and development of security for Kubernetes, Docker, Linux, GitLab;
- Incident response in Kubernetes, Docker, Linux, GitLab;
- Support and development of the Golden Images process.
Candidate Requirements:
- Automation experience: Bash, Python at a basic level;
- Experience with monitoring systems Zabbix, Grafana, Prometheus;
- Experience with infrastructure security frameworks (DAF, JCSF, etc.);
- Experience with Policy Engine class tools (Kyverno, OPA Gatekeeper, etc.);
- Experience with Runtime Security class tools (Falco, Tetragon, etc.);
- Basic knowledge of Linux administration and security, including Docker and Kubernetes;
- Experience with GitLab, including a basic understanding of GitLab CI/CD;
- Understanding of core web application and infrastructure security principles, knowledge of typical threats.
Will be a plus:
- Experience in AI security assurance;
- CTF participation experience;
- Penetration testing experience / Bug Bounty program participation;
- Relevant certifications (OSCP, OSWE, CKA, CKS, etc.).
What we offer for your comfort:
- Work in a highly expert team;
- Modern technology stack, large-scale projects, and a strong team;
- Powerful hardware for work;
- Work format of your choice (remote/flexible schedule);
- A combination of bank stability and IT flexibility;
- Internal meetups and workshops on IT topics.
