Chief AppSec Engineer

Chief AppSec Engineer for a banking project at Usetech. Salary up to 534,388 RUB gross, remote in Russia, full-time.

Responsibilities: participate in security analysis of tasks throughout the project lifecycle; analyze solution architecture for security and approve project documentation; model threat scenarios and approve risks; analyze development team plans and backlog, provide security requirements; investigate security incidents; support development teams with security practices; conduct code review to identify and fix vulnerabilities; work with results from secure development tools; prioritize vulnerability backlog and monitor fixes.

Higher IT education, preferably in information security. At least 4 years of experience in practical security analysis and architectural documentation analysis. Knowledge of: information security fundamentals (protocols, security tools, PKI, cryptographic algorithms); application security (OWASP Top 10, OWASP Mobile Top 10, CWE Top 25); information system architecture expertise (finding design-level errors and vulnerabilities, including business logic); application system technologies including microservices and containerization; code analysis and programming; modern web application principles, CI/CD, and SSDLC; common security enhancement practices; regulatory security requirements; risk-based methodology, qualitative risk assessment and threat scenario development; professional Burp Suite skills (custom extensions, multi-layered attacks, technique combination). Nice to have: CTF and bug bounty experience; OSCP, OSWE, Portswigger Web Security Academy, CEH, CISSP certifications; CodeQL rules writing; Java, Python, or Go.

Salary up to 534,388 RUB gross (before tax deduction). Remote format. Employment with Usetech ( штат).