DevSecOps Engineer

DevSecOps Engineer, Automated Systems LLC

Compensation: up to 2300 RUB/hour (negotiable)

Responsibilities:

1. Security Check Automation

• SAST (Source Code Analysis)
• DAST (Dynamic Application Security Testing)
• SCA (Software Composition Analysis - vulnerability scanning in third-party libraries)
• IaC Scanning (Terraform, Kubernetes, Ansible)
• Secret Scanning (searching for passwords and keys in Git)

2. CI/CD Protection

GitLab CI, GitHub Actions, Jenkins. Configure pipelines to prevent applications from reaching production if:

• critical vulnerabilities are detected;
• insecure libraries are used;
• the Docker image contains known CVEs.

3. Container Security Check

• Docker

• Kubernetes

• OpenShift

• Check for known vulnerabilities;

• run containers with minimal privileges;

• absence of unnecessary services and packages.

Work Format: Project-based, workload from 6 months. Employment: Sole Proprietor or Self-Employed, possibility of transition to full-time employment (under the Labor Code) Location: strictly Russian Federation

Project Essence: Government contract, "Chestny ZNAK" system.