Company: Digital Economy League
Location: Moscow
Employment Type: Full-time
About the Project:
We are building an ASOC platform that will provide software development teams with a unified view of real security threats and the ability to neutralize them.
Your tasks:
- Design the ASOC platform architecture – collect, prioritize data from SAST, DAST, SCA, secret detection scanners
- Develop and evolve platform modules – from scanner integration to automatic triage logic
- Automate routine tasks – write scripts and pipelines that replace manual alert analysis with reproducible processes
- Integrate security tools into the CI/CD of internal and external development teams
- Conduct audits of software development process maturity
- Prepare processes and evidence for certification according to GOST R 56939-2024, BSIMM, SAMM, so that the result is successful certification of the developed software according to information security requirements
We expect from you:
- Experience piloting and implementing several solutions from the list: SAST, DAST, SCA/OSA, ASOC/ASPM, API Security, Container Security
- Understanding of DevSecOps process architecture: how tools are integrated into CI/CD, how to manage false positives, how to build maturity metrics (MTTR, coverage, density of defects)
- Knowledge of Russian and international security standards and the ability to apply them to improve processes (GOST R 56939-2024, BSIMM, SAMM)
- Higher education in Information Security or IT
What we will provide:
- Official employment according to the Labor Code of the Russian Federation
- Corporate equipment for comfortable work
- Voluntary medical insurance with dental coverage
- Participation in professional community activities
- Own corporate library
- Opportunities to obtain qualifications at the company's expense
- Winter "vitaminization": free fruits in the offices
- Professional, supportive team ready to share expertise
- Exciting corporate events and engaging team-building activities!
