at Avito remotely
Senior Application Security Engineer at Avito. Improving S-SDLC, security audits, Bug Bounty development, communication with development teams.
Tasks:
- Improve the existing S-SDLC by integrating new security solutions and enhancing existing ones.
- Participate in security checks and audits.
- Implement new S-SDLC processes.
- Develop the Bug Bounty program.
- Communicate with a large number of development teams within the framework of consultations and risk management.
Requirements:
- Proficient in application vulnerability types and methods for their remediation.
- Experience with security analysis tools and vulnerability scanners (Intercepting Proxies/DAST/SAST).
- Expertise and experience in building secure development processes, including automating security checks and integrating them into the DevSecOps pipeline.
- Read and understand Python and Go code.
Skills:
- Python
- Go
- DAST
- SAST
- DevSecOps
