Project-based work with full-time employment.

Responsibilities:

• Analyzing source code for vulnerabilities (manual/automated).
• Training developers — improving secure coding skills and conducting training sessions.
• Vulnerability response — prioritizing identified issues, validation, and assistance with fixes.
• Exploitation of SAST\DAST.

Requirements:

• Readiness for project-based work (this vacancy implies project employment for approximately one and a half years).
• Relevant experience in an Information Security department of 3+ years.
• Understanding of cybersecurity: knowledge of OWASP Top 10, MITRE ATT&CK, common vulnerabilities (XSS, CSRF, SQLi, RCE, etc.).
• Experience with tools for static (SAST: Semgrep, SonarQube) and dynamic (DAST: Burp Suite, OWASP ZAP) security analysis, as well as for software composition analysis (SCA: Dependency-Track, OWASP Dependency Check).
• Confident reading and analysis of code in one or more programming languages: Python, Go, JavaScript/TypeScript, Kotlin (requires not just understanding syntax, but the ability to identify errors and vulnerable patterns).
• Analytical thinking: the ability not just to find a vulnerability, but to analyze root causes, prioritize risks, and propose effective methods for their elimination.

Additional requirements:

• Active participation in processes: conducting Security Code Reviews, Threat Modeling, Security Architecture Reviews, and consulting developers.
• Knowledge of security specifics for microservice architecture, REST/gRPC API, and working with containers (Docker, Kubernetes).

We offer:

• A solid foundation: official employment (Labor Code of the Russian Federation) in an accredited IT company.
• Health is a priority: an extended voluntary medical insurance package that includes dental care and psychological support.
• Meaningful work: participation in the development of a socially significant product that helps people stay connected in difficult life situations.
• Strong team: we value openness, responsibility, and striving for results, creating an environment for the professional development of each individual.
• Support for your well-being: we subsidize part of the cost of your gym membership.
• Remote format: work from any city with the option to visit the office in Tula for work sessions, corporate events, and informal communication.