Company: Sovcombank Technologies
Location: Saint Petersburg; Kazan; Novosibirsk
Employment: Full-time employment
Qualification: Middle
Specialization: Information Security Specialist
An Information Security Analyst (DevSecOps) vacancy has opened in the area of development process security.
Tasks to be addressed:
- Implement SSDLC tools in team CI/CD pipelines
- Conduct R&D and implement new security tools
- Jointly with AppSec, maintain and improve secure development processes
- Implement SSDLC KPIs and metrics.
Our expectations from the candidate:
- Knowledge of the DevSecOps approach
- Experience with SAST. Understanding the specifics of scanning different programming languages
- Experience with vulnerabilities in dependencies. Understanding how to generate an SBOM file
- Knowledge of bash/python/go at a level sufficient for writing automation scripts
- Knowledge of gitlab ci yaml at a level sufficient for understanding the organization of development team pipelines and for embedding SSDLC tools within them.
Will be a plus:
- Practical experience in K8s security assurance
- Experience deploying applications in K8s
- Knowledge of modern threats to web and mobile applications, including OWASP Top10, OWASP Mobile Top10, OWASP API Top10
- Knowledge of OWASP SAMM, BSIMM frameworks
- Knowledge of regulatory documents and industry standards GOST R ISO/IEC 15408-3-2013 683-P, 757-P of the Bank of Russia and assessment according to OUD.4.
We offer:
- Work in a large accredited IT company
- Full-time, schedule: 5/2 (weekends: Saturday, Sunday)
- Salary is discussed based on interview results
- Strong team and experienced mentor
- We support the professional development of everyone: there is an internal training center and a developed mentorship system, we actively participate in external events and organize our own (hackathons, yukons), we pay for external training, participation in conferences and English courses
- Extended benefits package (voluntary medical insurance with dentistry, fitness and internal sports events, co-working spaces in Sochi and Altai, material support in various life situations, discounts on packaged insurance products from the bank and partners, and much more)
- Immersion in AI culture – we interact with artificial intelligence on a regular basis and train newcomers in this, we provide free AI assistants
- Involvement, comfort and freedom of self-expression, come join us – it will be interesting!
