DevSecOps Specialist

DevSecOps Specialist at Red Soft. Salary up to 250,000 (net). Location: Saint Petersburg, Elektrosila metro. Focus on SAST/DAST/SCA, secret scanning, CI/CD security automation, SSDLC, and GOST R 56939-2024 compliance.

Project: ensuring secure development processes at Red Soft. Responsibilities: - Conduct code vulnerability analysis using SAST/DAST tools and basic fuzz testing. - Monitor vulnerabilities in third-party libraries using SCA analyzers. - Search for potential secret leaks (API keys, passwords) in code. - Participate in implementing security tools in CI/CD pipelines and automate secure software development processes. - Work with vulnerability reports: assess criticality, label results, validate tool findings. - Help build secure development processes (SSDLC). - Support compliance with standards (GOST R 56939-2024, technical side).

Experience with static (SAST) and dynamic (DAST) analysis tools, and fuzzers (for various programming languages). Basic skills in Linux and command line. Ability to write simple Python/Bash scripts for task automation. Understanding of secure development principles (OWASP Top 10, basic SSDLC concepts). Experience or familiarity with SAST/DAST tools and fuzzers (at least course/pet project level). Understanding of automation principles. Willingness to learn integration of security tools into CI/CD (Jenkins, GitLab, etc.).

Salary: up to 250,000 (net). Location: Saint Petersburg, Elektrosila metro (office). Hiring stages: 1) Call with recruiter (10 min) 2) Technical online interview (1 hour) 3) Short test task (max 2 hours) 4) Meeting/team introduction in the office. Offer.