Position: Senior Security Engineer
Company: DMarket
Experience required: 3y
English level: intermediate

Необхідні навички
— 4+ years of experience in Application Security with at least 2 years of work experience with software development teams and deployment to a production environment experience. Understanding and implementation of SDLC process.
— Experience with penetration testing, threat modeling, open-source, and commercial security tools.
— Experience in implementing and verifying OWASP ASVS.
— Experience with the OWASP Software Assurance Maturity Modell (OSAMM).
— Experience with conducting threat assessments, building threat models, and creating remediation plans based on the results of threat assessments.
— Experience with granting access rights in different systems (Unix, DB’s, GitLab, JIRA, k8s, etc).
— MS degree in Computer Science or equivalent practical experience is preferred.

Буде плюсом
— Cloud experience (Prefer GCP).
— Linux experience.
— OSCP Certification.
— Hashicorp Technologies (Terraform, Vault).
— Containers and Container Management (Docker, Kubernetes).
— Config Management (Ansible).

Обов’язки
— Design, build, and review security-related services and functionality of web applications, mobile applications, and desktop applications.
— Transform organisational and process challenges to achieve results that drive complex security efforts for internal and external customers.
— Advocate for security as a subject matter expert across multiple organizations, holding discussions on security topics and drive automation where required.
— Provide the Engineering team with well-researched security advice to demonstrate vulnerabilities.
— Implementation and support of IT security control.
— Responding to security incident notifications in event management, by investigating and analyzing potential security incidents.
— Project analysis to provide new features or security features.