The strongest cybersecurity team, together with SberTech's development teams (architects, developers, testers, etc.), is creating and developing an innovative product for the Russian and international markets – Platform V. Our platform helps internal and external users quickly and easily create and use natively secure low-code applications.
The Methodology, Certification, and Licensing Department is an integral part of the cybersecurity team, leading the preparation processes (together with development teams) and supporting the independent security assessment of Platform V software components (information security tools) and audits of secure software development processes.
Responsibilities
- Managing cybersecurity projects related to secure software development
- Participating in the development and implementation of secure software development (SSD) practices, performing work on assessing the compliance of the Company's processes with the requirements of the GOST series for Secure Software Development (GOST R 56939-2024, GOST R 71207-2024, etc.)
- Developing/updating/verifying internal regulatory documents (VND), Standards, and Company Processes considering SSD requirements
- Conducting consultations for development teams on the application of requirements in VND, standards, and processes
Requirements
- Education: Higher technical (preferably Cybersecurity)
- Knowledge and understanding of SSD practices (SAST, DAST, OSA, fuzzing, pentest, etc.)
- Understanding of the certification process for information security tools (SZIs), SSD processes, and information system attestation
- Experience in certifying SZIs
- Knowledge of modern information protection tools, methods, and techniques (including protection for virtualization and containerization technologies)
- Confident knowledge of Russian Federation legislation in the field of information protection (personal data, GIS, critical information infrastructure, banking sector): Federal Laws (FZ), RF Government Decrees (PP RF), FSTEC/FSB/Bank of Russia Normative Technical Documents (NMTD), GOST standards.
Will be a plus:
- Skills in working with generative AI models; experience creating AI agents and using them in work will be an advantage
- Proficient written (primarily) and spoken language skills
- Responsibility, goal-orientation.
Conditions
- Hybrid work format
- Annual bonus and annual salary review
- Accredited IT company status
- Extended voluntary medical insurance from day one and preferential family insurance after probation period
- Sber's corporate university, internal educational platform, participation in IT conferences
- 90 days of remote work per year
- Prime subscription with the possibility of sharing with three close contacts.
