About the direction: The Security Engineering team helps the business ensure product security. We solve various technical security tasks, from infrastructure to the business logic of applications for services such as Yandex Go, Search, Advertising, Yandex 360, Market, and others.

What we do: * Ensure security at different stages of the product lifecycle: from designing a new service to its runtime * Consult on security issues for other Yandex teams — for example, we explain how to properly organize the storage of critical data or integrate a new service * Help design functionality to protect our users' data * Participate in activities to obtain certificates that allow our services to confirm a high level of security * Investigate security incidents

We are looking for engineers specializing in Application Security (web).

We expect you to

• Be actively interested in the Secure Development Lifecycle (SDLC) and software code security analysis
• Understand web application security and know the principles of their construction and operation
• Understand the architecture of *nix systems, containerization systems

These are general requirements, they may vary depending on the position and team.

Submit your application, and we will contact you for an introduction and detailed discussion.