Lesta Games develops game projects in various genres, boldly experimenting with tools and technologies.
Over 2000 talented professionals work in the company's offices in St. Petersburg, Minsk, and Moscow.
We create games that have become a real cultural phenomenon: "World of Tanks", "World of Ships", Tanks Blitz, and we are also working on new promising projects.
We are not going to stop – new challenges and millions of players await us.
Ready to create the future of the gaming industry together? Welcome to the team!
We are actively looking for a colleague – an Application Security Engineer to work in Minsk.
Tasks to be performed:
- Support and development of secure development processes.
- Conducting security audits and reviews of product services and applications.
- Development of product security requirements.
- Automation of routine tasks and development of tools.
- Analyzing reports in Bug Bounty programs.
- Assisting developers in choosing secure solutions and writing secure code.
We expect:
- At least 2 years of experience in Application Security and/or DevSecOps.
- Understanding of the causes and methods of elimination/mitigation of common vulnerabilities (OWASP Top 10, OWASP Mobile Top 10, CWE Top 25).
- Understanding of the modern development cycle, processes, practices, and tools for ensuring application security.
- Experience in analyzing the security of web and mobile applications.
- Skills in working with and building processes with common DevSecOps tool classes (SAST, SCA, DAST, etc.).
- Proficiency in one of the programming languages: JS, Go, PHP, .Net, C#, C++, Python.
Will be a plus:
- Skills in threat modeling and risk assessment using common methodologies (STRIDE, DREAD, etc.).
- Knowledge and experience in implementing the Secure By Design/Default approach.
- Knowledge of operating system fundamentals, modern cloud technologies and containerization systems, security methods (Docker, Kubernetes, AWS, etc.).
- Experience participating in Bug Bounty and CTF, having own CVEs.
- Possession of relevant certificates (OSCP, OSWE, CDP, etc.).
- Experience speaking at relevant conferences and/or writing articles.
- Experience in developing and implementing own applied tools.
- Good understanding of client-server interaction specifics, request processing, authentication, authorization, and session management.
What we offer:
- Work in an IT company (PVT resident).
- Extended VMI policy from the first month of employment.
- Bonuses for sick leave and days off.
- Gym and showers in the office.
- Sports compensation.
- Meal compensation for the corporate canteen.
- Gifts for birthdays and on the first day at the company, payments on the wedding day and children's birthdays.
- Recreation rooms with board games, consoles, billiards, table tennis, as well as relaxation areas with massage chairs.
- From 500 to 1000 units of in-game gold to your game account daily.
- Delivery of employees by corporate shuttles from metro <-> office "Volna" (Minsk, Partizansky Prospekt, 178/2).
- Work-life balance: come to the office between 8 AM and 11 AM, leave between 5 PM and 8 PM.
