Company: YADRO
Location: Moscow
Experience: From 1 to 3 years
Responsibilities:
- Working with SBOM, tracking CVEs, fixing vulnerabilities in components/updating components to close vulnerabilities, working with dependency security, tracking BMC code supply chains
- Performing static code analysis, finding code defects and vulnerabilities, searching for secrets
- Creating targets for dynamic analysis, performing fuzz testing, analyzing found errors and fixing them, working with code coverage in fuzzing
- Creating unit tests for the attack surface, testing APIs, testing interfaces
- Working with CI/CD for the integration of automated testing
- Experience with Linux and understanding its architecture
Will be a plus:
- Creating/improving tooling for analysis
- Performing penetration testing for the BMC web interface
- Understanding of modern cryptography standards
Requirements:
- CycloneDX (utilities for working with it), DependencyTrack
- Experience with svace/svacer, additional plus - PVS-Studio
- AFL++/Libfuzzer/fuzztest/aflnet
- Languages: C/C++, bash, Python
Conditions:
- Become part of an ambitious product company contributing to the global engineering community, while annually increasing market share and financial performance;
- Hybrid work format: a workspace in a comfortable loft office on the territory of the business center “Tryokhgornaya Manufaktura” 10-15 minutes from the metro stations Krasnopresnenskaya/Barrikadnaya/Ulitsa 1905 Goda + remote work from home on a corporate laptop;
- Opportunity to choose a convenient start and end of the workday;
- Competitive salary level (ready to fairly assess your knowledge and experience) + performance-based bonuses;
- Opportunities for horizontal and vertical growth, as well as moving between projects and teams depending on results and interests.
