Senior Application Security, WMX

Salary: 350-450k net

Level: Middle+/Senior Format: office/hybrid

WMX is a Russian developer of cybersecurity solutions. For over 12 years, we have been creating products to protect web applications, APIs, and digital services. Now we are strengthening our expertise in the security of our own products and are looking for a Senior AppSec Engineer who will participate in the development of secure development practices, help teams make secure architectural decisions, and influence the quality of product protection at all stages of the life cycle.

Responsibilities:

• Conduct architectural reviews and threat modeling for both current and new services and functionalities.
• Conduct security analysis of applications, APIs, and business logic.
• Identify security risks and help teams find optimal ways to eliminate them.
• Develop Secure SDLC practices together with development and DevOps teams.
• Work with the results of AppSec tools (SAST, DAST, SCA) and the vulnerability management process.
• Participate in audits, certification activities, and the development of secure development requirements.

Requirements:

• 4+ years of experience in AppSec / Product Security.
• Experience in conducting architectural reviews and threat modeling.
• Good understanding of OWASP Top 10, OWASP API Top 10, CWE.
• Experience with AppSec tools (SAST, DAST, SCA).
• Understanding of Secure SDLC principles and modern approaches to secure development.
• Experience interacting with development teams.
• Ability to analyze code and understand typical vulnerabilities of modern applications.

Will be a plus:

• Experience with Kubernetes, Docker, Terraform, and cloud platforms.
• Experience integrating security tools into CI/CD.
• Experience preparing products for FSTEC certification.

Selection Process: HR screening --> Fit interview --> Tech interview --> Security check --> Offer

Contact: recruiter contact