RED SOFT is a Russian software developer. We create, develop, and maintain system and application software, state information systems, and also develop artificial intelligence-based software. RED SOFT is an accredited IT company.
We are looking for a Secure Development Engineer who is ready to grow in the field of software security. Your task will be to help implement security practices at all stages of the development lifecycle, as well as conduct software security analysis within the framework of product certification. We provide training, support, and opportunities to work with modern tools.
Responsibilities:
- Conducting code analysis for vulnerabilities using SAST/DAST tools and basic fuzz testing;
- Monitoring vulnerabilities in third-party libraries using SCA analyzers;
- Searching for potential secret leaks (API keys, passwords) in the code;
- Participating in the integration of security tools into CI/CD pipelines, automation of software security processes;
- Working with vulnerability reports: assessing criticality, tagging results, validating tool findings;
- Assisting in building secure development processes (SSDLC);
- Supporting compliance with standards (GOST R 56939-2024, technical aspects).
Our expectations for the candidate:
- Basic Linux and command-line skills;
- Ability to write simple scripts in Python/Bash for task automation;
- Understanding of secure development principles (OWASP Top 10, basic SSDLC concepts);
- Experience or familiarity with SAST/DAST tools, fuzzers (at least at the level of courses/pet projects);
- Understanding of automation principles;
- Willingness to learn the integration of security tools into CI/CD (Jenkins, Gitlab, etc.).
What we offer:
- Stability, permanent employment in a rapidly growing company engaged in import substitution;
- Work in a Ministry of Digital Development accredited IT company whose products are included in the Russian software registry;
- Comfort: no bureaucracy, we conduct interviews in 1, max 2 stages and provide quick feedback, flexible start to the workday and no dress code;
- Smooth onboarding, adaptation period, mentorship;
- Voluntary medical insurance with dental coverage;
- Internal and external training;
- Corporate life - joint educational, sports, and entertainment events.
