About the company:
We are creating a unified system for digital marking and traceability of goods in Russia and the EAEU countries. Our system reduces counterfeiting and guarantees the authenticity of goods produced in the country or imported into it.
Chestny ZNAK is one of the most high-load platforms with no analogues:
— microservice architecture on Kubernetes with Istio in our own infrastructure;
— petabytes of live data, which our services and clients work with around the clock via API;
— billions of transactions per day and tens of thousands of requests per second;
— real-time analytics on event streams and large-scale batch analytics at night;
— mobile application with 27+ million installations;
— dozens of production releases every day, feature flags, infrastructure as code.
Under the hood - Kafka, Cassandra, Spark, Airflow, Iceberg, ClickHouse, GitLab CI/CD, Helm, Prometheus, Grafana.
We are not afraid of complex tasks and launch bold engineering ideas into production!
About the team:
The team is building modern SSDLC processes using advanced technologies based on open source and enterprise solutions. Currently, we are looking for a candidate for the core system development team with the necessary minimum of system modules and libraries for running lxc containers and the containerd runtime.
What you will do:
- Perform security reviews of developed solutions concerning the OS/containerization security functions required by the FSTEC regulator.
- Triage SSDLC vulnerabilities, mitigate and control their remediation.
- Using make and gcc, build an operating system based on the Linux kernel with the necessary minimum of system modules and libraries for running lxc containers and the containerd runtime.
- Compile from source and run components that implement security functions in the operating system according to the provided list.
We expect from the successful candidate:
- At least 3 years of experience in AppSec;
- Programming experience in C++, Go;
- Experience with automated build systems (gcc, make, go);
- Experience with tools such as: SAST\SCA\Fuzzing;
- Experience with the development tool stack: Jira, Gitlab, Harbor, Nexus, Rancher, Kubernetes, LXC, Vault, FreeIpa, Keycloak;
- Experience building the Linux kernel and packages from source;
- Expert knowledge of the Linux operating system family;
- Deep understanding of Linux containerization mechanisms;
- Knowledge of the main aspects of web application security (OWASP Top 10, SANS Top 25), as well as best practices for SSDLC and Kubernetes.
Why us:
Development Opportunities
- Participation in meetups and conferences: we share knowledge and learn from others.
- Internal corporate training.
- Buddy support: a guide to the company's corporate life.
We care about our employees
- Health: Voluntary Medical Insurance (including dentistry) after the probationary period, 100% sick pay (up to 14 days a year), travel insurance, corporate psychologists.
- Financial assistance in difficult life situations.
- Benefits cafeteria: not only for sports and training, but also for IT services, expanded VMI for family.
Convenience and Comfort
- Employment according to the Labor Code of the Russian Federation in an accredited IT company.
- Work remotely from anywhere in Russia, in a hybrid format, or from the office in the center of Moscow/St. Petersburg (near the metro).
- Flexible start of the workday.
- We provide work equipment: laptop, monitor, headset - everything for productive work.
Company Life
- Open communication culture.
- Sports: football, volleyball, yoga - many options, choose or create your own community!
- Workshops, holidays for children, book club - you won't get bored.
- Stylish merch that you'll want to wear.
- Referral program: bring friends and get bonuses.
If you want to grow professionally, work with great people, and feel cared for - we are waiting for you in our team!
