Company: R-Vision
AppSec Engineer for conducting web pentests and product security analysis, interacting with developers, and improving SSDLC.
Responsibilities:
- Conducting consultations and training for development teams
- Developing scanning automation and ASPM solutions
- Generating SSDLC improvements in a broad sense
- Analyzing security scanner alerts, creating tasks for the development team, and proposing vulnerability prevention methods
Requirements:
- Knowledge of identifying vulnerabilities in products during Pentest and source code review
- Ability to negotiate with developers, and to accurately describe tasks based on exploitation risks
- Experience in marking up security scanner alerts
- OWASP TOP 10
- Programming language knowledge for reading code and finding vulnerabilities: JS, TS, Python
- Understanding of CI/CD and SSDLC processes
- Responsibility, initiative, independence
Conditions:
- Remote work is possible
- Salary is discussed during the interview
Employment Type: FULL_TIME
Skills:
- JS
- TS
- Python
- CI/CD
- SSDLC
- OWASP TOP 10
