Application Security Engineer (AppSec / Web3 / Blockchain)

Senior/Expert Application Security Engineer for blockchain solutions at Alfa-Bank's A-Token project, fully remote in Russia, salary up to 667,985 RUB gross.

Analyze security of applications, microservices, and blockchain solutions. Conduct security code reviews, security design reviews, and threat modeling. Find, analyze, and assess vulnerabilities in applications and smart contracts. Participate in secure development processes (SSDLC/DevSecOps). Assess security risks and develop recommendations for mitigation. Collaborate with development and architecture teams on product security.

Commercial experience in Application Security / Product Security. Practical experience with Web3/Blockchain and smart contract auditing. Experience with Slither, MythX, Echidna. Knowledge of OWASP Top 10, penetration testing methods, and source code analysis. Understanding of microservices architecture, APIs, and authentication mechanisms. Knowledge of MPC, HSM, TEE technologies. Understanding of KYC/AML/KYT and risk management principles in financial systems.

Official employment under Russian Labor Code in an accredited IT company. Fully remote work within Russia and flexible start of the workday. Provision of necessary work equipment. Extended medical insurance including dentistry, corporate psychologist support. Paid training and certifications, corporate university and library. Usetech English Club - corporate English learning program. Internal professional communities and expertise exchange. Corporate loyalty program, discounts from partners. Corporate events and family support programs.