Application Security Engineer

• Participate in building Application Security processes within the company;
• Participate in all stages of the Secure Software Development Lifecycle (SSDLC), as well as building DevSecOps;
• Model threats and form security requirements, analyze application security;
• Perform code reviews and component/architectural analysis of applications;
• Advise developers and monitor the remediation of identified vulnerabilities;
• Develop regulations, instructions, and training materials in the context of Application Security

Experience: 3 to 6 years

• Understanding of modern application and information system architectures;
• Deep understanding of the software development lifecycle and DevOps methodologies;
• Knowledge of best practices and methods for developing secure applications;
• Ability to read application code in Erlang/Python/C/C++ and identify vulnerabilities within it;
• Knowledge of Bash, Python, or any other scripting automation tool;
• Understanding of Linux system architecture and network subsystem operation;
• Experience in working with and implementing SAST, DAST, SCA, and other automation solutions for Application Security processes;
• Experience in testing applications and information systems for vulnerabilities;

Location: Moscow

• Employment in an accredited IT company under the Labor Code of the Russian Federation;
• Flexible start and end to the workday;
• A strong team that will help you grow professionally;
• Comfortable offices that you'll want to return to — coffee, tea, tasty and healthy snacks in the kitchens, as well as a corporate library and convenient meeting rooms