Application Security Engineer (AppSec / Web3 / Blockchain)

Application Security Engineer for a digital financial assets platform at a major Russian bank. Remote, salary up to 667,985 RUB gross.

Working on a digital financial asset (DFA) platform for a major Russian bank. The project involves tokenization, accounting, and circulation of digital assets based on blockchain technologies. Responsibilities: - Conduct security analysis of applications, services, and smart contracts. - Perform Security Code Review, Security Design Review, and threat modeling. - Identify and assess vulnerabilities in Web3 solutions and microservice architecture. - Participate in developing secure development practices (SSDLC / DevSecOps). - Assess security risks and propose technical solutions to mitigate them. - Interact with development and architecture teams.

Commercial experience in Application Security / Product Security. Practical experience with Web3 / Blockchain and smart contract security auditing. Experience with Slither, MythX, Echidna. Knowledge of OWASP Top 10, penetration testing methods, and source code analysis. Understanding of microservice architecture, APIs, and authentication mechanisms (OAuth2, JWT, OIDC). Knowledge of MPC, HSM, TEE technologies. Understanding of KYC / AML / KYT and risk management principles in financial systems.

Salary up to 667,985 RUB gross. Remote work within Russia.