In this position, you will lead a strong team of 10 AppSec BPs and become the link between security, development, and business. The goal is to implement SSDLC not as a formality, but as a working mechanism that allows for the release of secure products without hindering business.
What you will do
- Lead a team of 10 AppSec BPs, whose tasks include analyzing IT team improvements at all stages of the project lifecycle (SSDLC), including working with requirements, architecture analysis, code review, and manual vulnerability scanning.
- Develop secure development practices and processes. Implement the SSDLC process within teams.
- Formulate short-term and long-term strategies for the development of the direction. Convert them into quarterly tasks for employees, and ensure their implementation.
What we expect
- Experience managing a team of 5 or more people.
- Experience in practical security assessment and architecture analysis — from 4 years.
- Deep understanding of Agile, CI/CD, and specifics of working with microservices architecture and containerization.
- Ability to find and fix web vulnerabilities from OWASP Top 10, OWASP Mobile Top 10, CWE Top 25.
- Ability to transform regulatory requirements into practical tasks for development (knowledge of information security requirements for the financial sector will be your advantage).
- Ability to conduct quality risk assessments and form threat scenarios.
What we offer
- Stable and transparent income: salary is discussed after the interview and a quarterly bonus based on KPI results.
- Flexible working hours: you can plan your time as it suits you and your team.
- Fully remote or hybrid option, as well as a cozy IT hub in Moscow, St. Petersburg, Yekaterinburg, and seasonal co-working in Sochi.
- Complex and interesting tasks, modern technology stack.
- Care for your health: voluntary medical insurance program from the first days of employment, which includes dentistry, service in the best clinics in the city, insurance, and compensation for 10 days of sick leave.
- Payment for attending specialized conferences and courses, we help with preparation for public speaking and writing articles on Habr.
- Access to free corporate libraries Alpina Digital, MyBook, and business publications.
- Offers from the Bank exclusively for employees: own sports halls (Moscow, St. Petersburg, Yekaterinburg), as well as discounts on services from travel agencies, food products, in restaurants, bars, and shops.
