Location: Moscow, m. Aeroport; hybrid format or remote work from Russia
Salary: from 200,000 ₽ per month net
Company
VK develops digital products and services for millions of users and strengthens its information security team.
Responsibilities
- Conduct security assessments of web and mobile applications.
- Advise development teams on security issues.
- Conduct architectural reviews and form security requirements.
- Interact with engineers developing and supporting products.
Requirements
- At least one year of experience in Application Security.
- Experience in analyzing web application security.
- Understanding of vulnerability exploitation techniques, application security methods, and modern application architectures.
- Knowledge of best practices for developing secure applications.
- Knowledge of Bash, Python, Go, or other scripting automation tools.
- Ability to read code and identify errors.
Nice to have
- Reports on found vulnerabilities in Bug Bounty or registered CVEs.
- Relevant certifications BSCP, OSWE, or OSCP.
- Active profile on information security training platforms, such as HackTheBox.
- Understanding of SSDLC and DevSecOps cycles, experience participating in CTFs.
- Experience speaking at industry conferences and writing technical articles.
Culture and Benefits
- Ambitious tasks, large-scale projects, and professional growth opportunities.
- A team of specialists from various fields with knowledge sharing.
- Well-being program and support for employee health.
- Food compensation in cafes and restaurants near offices — 800 rubles per day.
- Compensation for sports activities — up to 35,000 rubles per year.
- Corporate sports teams and joint activities.
