About the Company and Team
Insurance Group "SOYeG", one of the largest federal-level insurers in Russia, offers you to join a highly professional team of specialists possessing unique market experience, knowledge, and technologies.
Do you want to be part of an exciting digital transformation process?
The Information Security department at SOYeG is actively developing. We are creating new solutions that make our work more technological and efficient.
Currently, we are looking for an experienced Code Security Specialist.
Responsibilities:
- Develop the secure development lifecycle (S-SDLC) and processes for web application static analysis (processes, automation);
- Ensure the security of applications developed and used by the company;
- Conduct security audits of developed services (manual analysis, static code analysis, secrets search);
- Participate in the design of secure architectures for developed products;
- Formulate and formalize security requirements for products;
- Consult developers and monitor the remediation of identified vulnerabilities;
- Develop, implement, and maintain information security systems and processes related to static code analysis and vulnerability detection;
- Conduct employee training on information security requirements in development.
Candidate Expectations
- Ability to independently identify vulnerabilities in web applications;
- Understanding of CI/CD (Gitlab-CI) and DevOps cycles;
- Understanding of the principles of operation and configuration of rules and tools for static analysis of web applications;
- Expert knowledge of client-side and server-side vulnerabilities (OWASP TOP-10 and a bit more);
- Understanding of at least one programming language (Java and Python are preferred);
- Understanding of authentication and authorization systems principles (PKI, LDAP, OAuth, SAML, 2FA);
- Knowledge of Bash, Docker, Python, or Go;
- Ability to read code and identify errors;
- Experience with vulnerability scanners (Burp Suite, OWASP ZAP).
Will be a plus:
- Reports on vulnerabilities found in Bug Bounty programs;
- Relevant certifications (OSCP, OSWE, CDP, etc.);
- Registered CVEs; experience speaking at industry conferences and writing industry articles.
Working Conditions
- Employment strictly in accordance with the Labor Code of the Russian Federation
- Company care for your health: Voluntary Medical Insurance with dental care in the best clinics in the country
- Premium conditions for all types of insurance at "SOYeG" for you and your close relatives
- Own fitness center in the office in the center of Moscow (latest unique Milon equipment for "smart" workouts)
- Opportunity for external training after successful completion of the probation period, as well as training on courses from our corporate portal
- Company care for employees' children: discounts in summer camps and New Year's gifts
- Real opportunities for professional and career growth
- Commitment to long-term cooperation: we will be a guarantor of stability for you;
- Opportunity for hybrid work (company office within walking distance of Chistye Prudy metro station)
