Modern and secure payment solutions that provide seamless transactions for businesses of any scale.
We are looking for an engineer to join our information security team. You will be responsible for protecting the infrastructure and integrating security checks into the development process. You will work closely with developers and the operations team: identifying vulnerabilities and risks, proposing solutions, and helping to implement them.
Responsibilities
- Integrate security checks into GitLab CI/CD: connect SAST, SCA, DAST, secret scanning, and container scanning; configure release admission criteria and control exceptions;
- Analyze C#/.NET code for vulnerabilities — including SSRF, injection, authorization errors, insecure local file reads, and secret leaks;
- Review fixes, including issues not covered by automatic scanners;
- Protect Linux infrastructure: manage access, configure PAM and SSH, work with auditd and analyze logs;
- Participate in container and Kubernetes protection: evaluate images and configurations, work with RBAC, NetworkPolicy, Secrets, SecurityContext, and application isolation;
- Analyze vulnerabilities: assess CVE/CVSS applicability and priority, check for false positives, organize remediation, and control updates;
- Analyze network risks: work with an understanding of TCP/IP, DNS, TLS, PKI, VPN, Firewall, ACL, segmentation, and outbound connection control;
- Work with WAF: analyze triggers, configure rules and exceptions, consider tool limitations;
- Support IAM practices: LDAP/FreeIPA, RBAC, least privilege, service accounts, secret storage and rotation;
- Participate in monitoring and investigations: analyze events, configure correlation rules and alerts, identify suspicious activity;
- Automate checks and the application of secure configurations;
- Coordinate security requirements with development and operations, and assist in controlling fixes.
Requirements
- Experience in information security, AppSec, or infrastructure protection;
- Understanding of the architecture and interaction of components on the .NET, MSSQL, PostgreSQL, Redis, and RabbitMQ stack;
- Practical experience with GitLab CI/CD and security tools: Semgrep, Trivy, Gitleaks, or similar;
- Confident Linux administration, specifically Ubuntu/Debian;
- Knowledge of network security principles; no need to independently administer network equipment;
- Understanding of Docker and Kubernetes and practices for protecting containers and applications;
- Experience with automation tools, such as Ansible, as well as basic Bash and Python skills;
- Understanding of IAM, vulnerability management, and SIEM monitoring basics;
- Familiarity with ELK, Prometheus, Grafana, Wazuh/OSSEC, or similar solutions.
Conditions
- Remote work format;
- Schedule 5/2: from 09:00 to 18:00 or from 10:00 to 19:00;
- Competitive salary — to be discussed after the interview;
- A powerful work laptop will be provided;
- 100% compensation for sick leave;
- Discount on English language courses at Skyeng.
