AppSec BP

About Us

• Every month, cian.ru is visited by 20+ million unique users.
• Over 2.2 million up-to-date listings are published on Tsian.
• We are among the top 20 most valuable companies in the Russian internet according to Forbes.
• The only proptech from Russia that is in the top 10 real estate services worldwide.

Tasks to Solve

• Support and ensure the security of product development throughout its entire lifecycle.
• Analyze code, architecture, and business operations for vulnerabilities and weaknesses, participate in the architectural committee.
• Automate and improve product security processes.
• Analyze information security risks, develop recommendations for risk reduction.
• Manage information security projects, interact with stakeholders.

Our Future Colleague

• Has more than 3 years of experience in application/product security.
• Possesses deep expertise in detecting and fixing vulnerabilities in web applications (OWASP top 10).
• Has experience in building secure development processes and improving SAST/DAST/SCA tools.
• Has code reading and review skills in C#, Java/Kotlin, Python, JavaScript.
• Able to automate tasks (Python/Groovy) and understands CI/CD processes (Jenkins, Camunda).
• Knows network protocols, security frameworks, and standards (OAuth2, JWT, OpenID Connect, etc.).
• Understands cryptographic protocols and basic infrastructure protection tools.
• Can model threats and propose measures to reduce risks.
• Has experience designing microservice architectures.
• Worked with Kubernetes, Docker, Git.

What We Offer

• Remote work with the option to visit offices in Moscow, St. Petersburg, and Novosibirsk. The offices offer fully equipped kitchens, as well as snacks, fruits, coffee, and tea, free car and bicycle parking. Quiet rooms for focused work or rest, a massage chair and helmet, and a "lounge area" with PlayStation.
• Great opportunities for growth and development: in the first few months, each employee has a mentor, followed by a personal development plan and the opportunity to enhance soft/hard skills through practice, training, and conferences.
• Voluntary Medical Insurance (DMS) from the first working day (including dentistry, hospitalization, and travel insurance abroad).
• 5 days off per year, in addition to regular vacation.
• Benefit cafeteria: each employee has a monetary deposit of 25,000 rubles – you can use it to pay for a gym membership, training, entertainment, consultations with psychologists and other specialists, or to buy items or gifts for yourself and your family.
• Bonus for 10 days of sick leave: Tsian compensates for 10 working days of sick leave per year after the probationary period. If you spend two weeks on official sick leave, you will not lose income; your monthly salary will be paid in full.
• Discount programs from PrimeZone and BestBenefits.