AppSec Engineer

AppSec Engineer, Automated Systems LLC

Compensation: up to 2000 RUB/hour (negotiable)

Responsibilities: vulnerability scanning in code; SDLC security; SAST, DAST, SCA; architecture analysis and web application protection.

Knowledge and Skills:

1. SAST expertise – experience in triaging scanner results (Semgrep/CodeQL/Svace) for C, Go, Java; Knowledge of CWE classes.
2. Middle level C knowledge, ability to read code, navigate call graphs, understanding of working with pointers and memory in C.
3. Go knowledge – analysis of data races, goroutine leaks, error handling.
4. Java knowledge - ability to read code, knowledge of JVM fundamentals.
5. Knowledge of Kubernetes architecture, understanding of its operation.

Work Format: Project-based, commitment of at least 6 months. Employment: Individual Entrepreneur or Self-Employed, with the possibility of transitioning to full-time employment (under the Labor Code). Location: strictly Russian Federation. Project essence: Government contract, "Honest Mark" system.