DevSecOps Specialist, Red Soft
Salary: up to 250k (net)
Location: Saint Petersburg (Elektrosila metro station)
Responsibilities:
**- **Conducting code analysis for vulnerabilities using SAST/DAST tools and basic fuzzing testing;
- Monitoring vulnerabilities in third-party libraries using SCA analyzers;
- Searching for potential secret leaks (API keys, passwords) in code;
- Participating in the implementation of security tools in CI/CD pipelines, automation of information security processes;
- Working with vulnerability reports: assessing criticality, marking results, validating tool findings;
- Assisting in building secure development processes (SSDLC);
- Supporting compliance with standards (GOST R 56939-2024, technical aspects).
Tech Stack and Requirements:
**- **Experience with static (SAST) and dynamic (DAST) analysis tools, as well as fuzzers (for various programming languages)
- Basic Linux and command-line skills;
- Ability to write simple Python/Bash scripts for task automation;
- Understanding of secure development principles (OWASP Top 10, basic SSDLC concepts);
- Experience or familiarity with SAST/DAST tools, fuzzers (at least at the level of courses/pet projects);
- Understanding of automation principles;
- Willingness to learn the integration of security tools into CI/CD (Jenkins, Gitlab, etc.).
Hiring Process:
- Call with a recruiter (10 min)
- Technical online interview (1 hour)
- Short test task (2 hours maximum)
- Meeting/introduction with the team at the office
Offer
