A vacancy for an Information Security Analyst (DevSecOps) has opened in the direction of development process security.
Tasks to be solved:
- Implement SSDLC tools into team CI/CD pipelines
- Conduct R&D and implement new security tools
- Together with AppSec, maintain and improve secure development processes
- Implement SSDLC KPIs and metrics.
Our expectations from the candidate:
- Knowledge of the DevSecOps approach
- Experience with SAST. Understanding the specifics of scanning various programming languages
- Experience with dependency vulnerabilities. Understanding how to generate an SBOM file
- Knowledge of bash/python/go at a level sufficient for writing automation scripts
- Knowledge of gitlab ci yaml at a level sufficient for understanding the organization of development team pipelines and for embedding SSDLC tools into them.
Will be a plus:
- Practical experience in K8s security assurance
- Experience deploying applications in K8s
- Knowledge of modern threats to web and mobile applications, including OWASP Top10, OWASP Mobile Top10, OWASP API Top10
- Knowledge of OWASP SAMM, BSIMM frameworks
- Knowledge of regulatory documents and industry standards GOST R ISO/IEC 15408-3-2013 683-P, 757-P of the Bank of Russia and assessment according to OUD.4.
We offer:
- Work in a large accredited IT company
- Full-time, schedule: 5/2 (weekends: Saturday, Sunday)
- Salary is discussed based on interview results
- Strong team and experienced mentor
- We support the professional development of each employee: there is an internal training center and a developed mentoring system, we actively participate in external events and hold our own (hackathons, yukons), we pay for external training, participation in conferences, and English courses
- Extended benefits package (Voluntary Medical Insurance with dentistry, fitness and internal sports events, co-workings in Sochi and Altai, financial support in various life situations, discounts on packaged insurance products from the bank and partners, and much more)
- Immersion in AI culture – we interact with artificial intelligence on a constant basis and train newcomers in this, we provide free AI assistants
- Engagement, comfort, and freedom of self-expression, come join us – it will be interesting!
