DevSecOps / AppSec Engineer

You will

• Integrate and maintain security tools and processes within the CI/CD pipeline.
• Collaborate with development and operations teams to embed security at every stage of the software development lifecycle.
• Automate security testing and monitoring for prompt identification and response to potential threats.
• Establish and uphold secure coding, testing, and deployment policies and best practices.
• Implement risk mitigation techniques in container security and orchestration in a hybrid cloud environment.

Requirements

• Solid understanding of automation tools like GitLab CI or equivalent.
• Experience in DevSecOps, with a focus on embedding security within CI/CD processes.
• Experience with SAST and DAST tools like Sonarqube, Snyk, Burp Suite.
• Knowledge of modern authentication and authorization protocols (Oauth2, OpenID Connect).
• Knowledge of OWASP Top 10, Top 10 API, WSTG.
• Proficiency in containerization and orchestration technologies (e.g., Docker, Kubernetes).
• Familiarity with cloud security, particularly on platforms like AWS.
• Proficient in English, B2 level or higher.

We offer

• Being a part of a modern international technology team, zero bureaucracy, legacy and technical debt.
• Great opportunities for professional growth and personal fulfillment: top team, cool atmosphere, participation in professional international conferences.
• Remote work from anywhere in the world, flexible schedule, help with relocation.
• A real wage, pay in hard currency, compensation for VMI, corporate sports and non-core training, and help with relocation.
• Awesome corporate events.