#DevSecOps #AppSec #CI_CD #Python #Kubernetes #Docker #Security #Remote #Vacancy

🏢 Company: Zontik 📍 Location: Russia only 💰 Format: Individual Entrepreneur / Labor Contract up to 300k gross

We are looking for a DevSecOps Engineer to join the AppSec development and secure development process automation team.

⚙️ Responsibilities:

• Support and development of new ASOC system modules • Preparation of reports and data for BI systems • Consulting development teams on DevSecOps tools • Interaction with SOC / AppSec / InfraSec teams • Communication with DevOps teams on CI/CD stack support • Participation in the implementation and piloting of security solutions

🔍 Requirements:

✔️ Proficient in Python 3.* / Bash (middle+) ✔️ Understanding of SDLC and DevSecOps practices ✔️ Experience with CI/CD and Git-based processes ✔️ Experience with vulnerability scanners: SAST / DAST / SCA / OSA / CS / SecretMgmt ✔️ Experience with Docker and Kubernetes ✔️ Proficient administration of *nix systems ✔️ Understanding of secure development standards (OWASP, CISO) ✔️ Skills in working with databases and key-value storage

🛠 Will be a plus:

➕ Hashicorp Vault / external Secret Storage ➕ ASPM systems (DefectDojo) ➕ Experience in implementing security tooling in an enterprise environment

📌 Technology Stack:

Python • Shell • PostgreSQL • Git • Bitbucket • TeamCity • Nexus • Trivy • Fortify • Semgrep • Dependency Track • TruffleHog • Gitleaks • FineBI

💬 Soft skills are important:

— Communication skills — Responsibility for results — Meeting deadlines — Initiative and desire to develop new solutions

📩 Contact: