AppSec Engineer

AppSec Engineer at Automated Systems LLC, up to 2000 RUB/hour, project work for 6+ months, government project 'Honest Sign', location strictly Russia.

Tasks: searching for vulnerabilities in code; SDLC security; SAST, DAST, SCA; analysis of architecture and protection of web applications.

1. SAST expertise – experience in triage of scanner results (Semgrep/CodeQL/Svace) for C, Go, Java; knowledge of CWE classes. 2. Middle knowledge of C, ability to read code, traverse call graphs, understanding of pointers and memory in C. 3. Knowledge of Go – analysis of data races, goroutine leaks, error handling. 4. Knowledge of Java – ability to read code, knowledge of JVM basics. 5. Knowledge of Kubernetes architecture, understanding of its operation.

Project-based work, workload from 6 months. Employment: as individual entrepreneur or self-employed, possible transition to staff (under Labor Code). Location strictly Russia.