AppSec Engineer / DevSecOps

AppSec Engineer / DevSecOps, salary up to 400,000 RUB per month, remote (RU), hybrid or office (Moscow), full-time. Large company developing cloud and AI platforms.

We are a large development company developing public and private clouds, managed databases, AI platforms, and billing platforms. Looking for an AppSec Engineer for the security team. Responsibilities: - Develop and implement processes to increase the maturity level of secure development. - Integrate secure development tools with DevOps processes. - Conduct application security analysis using SAST/DAST/SCA, Container security, develop and configure rules. - Analyze and form security architecture of products. - Coordinate work of teams to eliminate identified vulnerabilities. - Increase security awareness of development teams. - Maintain the Bug Bounty program.

Ideal specialist: - 5+ years of experience as an AppSec Engineer. - Knows and understands principles of exploiting threats from OWASP Top 10, CWE Top 25 and protection against them. - Worked with SAST, DAST, SCA/OSA, ASOC tools. - Understands REST/gRPC API principles. - Understands K8S: operators, webhooks, reconciliation loop. - Understands principles of secure inter-service interaction. - Worked with Docker, K8S and automated deployment tools. - Basic knowledge of DevOps/DevSecOps (system landscape, purpose, tasks, general understanding of processes). - Analyzed source code and identified vulnerabilities at least in Go/Python. Nice to have: - OSWE/BSCP certificate. - Participation in Bug Bounty.

Salary: up to 400,000 RUB after tax. Work format: remote (within RF), hybrid or office (Moscow). Employment: full-time.