UNIREST is the rights holder of the ROSTIC'S brand, the very one with unforgettable chicken dishes and a cool team.
Now our information security team is looking for a great Application Security Engineer (AppSec Engineer) who will ensure the protection of the company's applications, manage WAF, and develop secure development processes.
Your tasks:
- Implement and develop secure SDLC (SSDLC) processes at all stages of development.
- Integrate and administer modern application security analysis tools (SAST, DAST, SCA, Secret Scanning, etc.) and ensure their operation in CI/CD.
- Analyze scan results, triage found vulnerabilities, and coordinate and track their remediation.
- Manage and develop WAF, analyze events, and ensure its integration with other security systems.
- Provide consultations and training to teams on secure development issues, as well as code and architecture reviews.
- Participate in Bug Bounty and pentests: analyze reports, confirm vulnerabilities, and prepare infrastructure for checks.
- Prepare analytical and technical reports, interact with internal and external teams.
What's important to us:
- Deep understanding of SSDLC principles and experience in organizing and applying information security tools (WAF, SAST, DAST, SCA, etc.).
- Skills in administering intrusion detection and prevention systems.
- Experience in analyzing and interpreting scan results, understanding vulnerabilities (OWASP) and ways to fix them.
- Excellent analytical skills, ability to work in a team, and prepare clear reports.
- Understanding of modern incident response methods.
- Basic understanding of Python.
A plus would be:
- Possession of eWPT/eWPTX, OSWE, CSSLP, GWAPT/GWEB certifications or similar.
- Programming experience in Python.
We offer:
- Competitive salary based on interview results.
- Annual bonus based on performance.
- Remote work format from anywhere.
- Official employment under the Labor Code of the Russian Federation in an accredited IT company.
- Compensation for food expenses in the form of supplements.
- Life insurance and voluntary medical insurance after the probationary period.
- Training at the Corporate University and access to MIF libraries.
- Team events and corporate discounts.
- Participation in volunteer programs and ROSTIC’S talent shows.
