Application Security Engineer

Application Security Engineer at an international holding. Fixed salary up to 300,000; full-time office 5/2 in Moscow, Moscow-City, employment under Russian Labor Code.

Secure SDLC implementation in AI projects. Support development teams from architecture design to production. Configure, integrate and support SAST, DAST and IAST solutions. Integrate security tools into CI/CD pipelines. Analyze scan results, assess real risks and help developers fix vulnerabilities. Security review of code, including AI-generated code. Conduct Threat Modeling for new products and functionality. Develop internal security tools and automate processes with Python. Participate in securing agentic AI systems: isolation policies, data flow control, sandboxing and output validation.

3+ years of commercial experience in AppSec / DevSecOps / Security Engineering. Confident knowledge of at least one programming language. Practical experience with Linux and Docker. Experience using and integrating SAST, DAST and IAST tools. Good understanding of CI/CD and Secure SDLC principles. Experience analyzing vulnerabilities and working with development teams to fix them. Ability to argue for security requirements and find common ground with technical teams. Interest in AI Security and desire to develop in security of AI-generated code and agentic systems.

Full-time, office 5/2 from 10:00 to 19:00. Employment under the Labor Code of the Russian Federation. Location: Moscow, Moscow-City. Fixed salary up to 300,000.