Position: Applications Security Engineer
Company: Yalantis
Experience required: 3y
English level: intermediate

During our twelve-year journey, we help our clients to create apps and enterprise ecosystem from scratch in order to achieve their business goals. And now we’re looking for an experienced SecOps Engineer to join a fast growing fintech product. It’s a modern mobile neo-banking application that allows users to create and manage accounts for individuals and legal entities, solves real-life problems and helps millions of people across the USA.

We’re looking for someone who:
— Embodies our EAGER values—is ethical, adaptable, gritty, empathetic, and remarkable.
— Has a minimum of two years in application security or related field.
— Has knowledge of programming languages (Python/JS/Java/Go).
— Is familiar with software development methodologies, processes, and tools.
— Is familiar with modern DevOps practices and tools.
— Familiar with most common implementations of the Threats (e.g. XSS, SQL Injection, XSRF, buffer overruns, brute force, rainbow tables, DoS etc.) and how they match the general classification
— Has working experience with application security tools like BurpSuite, OWASP ZAP, Metasploit, etc.

Ideal candidate would be someone who:
— Has prior experience in Security Development Lifecycle.
— Has experience with Application Security Testing (SAST, DAST, SCA, etc.)
— Experience with Container Orchestration, Automation, and Security Configuration Management (Kubernetes, Jenkins, Terraform, Puppet, Ansible, etc)
— Has experience with AWS (or other cloud platforms)
— Participation in bug bounty programs and security research will be an advantage
— Certifications in Security will be an advantage

Responsibilities:
— Serve as the subject matter expert for application security, providing guidance to Engineering and Product
teams.
— Develop secure system design and secure coding recommendations.
— Design and implement SDLC practices including automated and manual security tests, code review, etc.
— Integrate security controls in CI/CD and operational pipelines.
— Manage product bug bounty and drive different program initiatives and promotions.
— Implement and manage tools (e.g., web security scanners) to help test and monitor product security

What you’ll get from working with us:
— Great compensation and social packages
— Full financial and legal support for private entrepreneurs
— Opportunities for professional growth
— Individual development plan
— Team buildings and corporate activities
— English lessons with native speakers
— The best networking opportunities with international clients
We expect our future colleague to have a strong security management background and good communication skills. Join us and send your CV