Position: Senior Security Engineer
Company: SoftServe
Experience required: 3y
English level: upper

Hard skills
— 4+ years of experience in Application Security with at least 2 years of work experience with software development teams and deployment to a production environment experience. Understanding and implementation of SDLC process.
— Experience with penetration testing, threat modeling, open-source, and commercial security tools.
— Experience in implementing and verifying OWASP ASVS.
— Experience with the OWASP Software Warranty Maturity Model (OSAMM).
— Experience with conducting threat assessments, building threat models, and creating remediation plans based on the results of threat assessments.
— Experience with granting access rights in different systems (Unix, DB’s, GitLab, JIRA, k8s, etc).
— MS degree in Computer Science or equivalent practical experience is preferred.

As a Plus
— Cloud experience (Prefer GCP).
— Linux experience.
— OSCP Certification.
— Hashicorp Technologies (Terraform, Vault).
— Containers and Container Management (Docker, Kubernetes).
— Config Management (Ansible).

What we offer
— Team of like-minded professionals.
— Insurance.
— Unique project with modern technologies.
— Perspective of career and financial growth.
— Free lunches.
— Paid English classes.
— Budget for professional development.
— Game room with chill-out zone, kicker, and gamepad.
— Computer club, VR.
— Coffee point with a real barista.
— Flexible timetable and modern office in the center of Kiev.

Duties
— Design, build, and review security-related services and functionality of web applications, mobile applications, and desktop applications.
— Transform organisational and process challenges to achieve results that drive complex security efforts for internal and external customers.
— Advocate for security as a subject matter expert across multiple organizations, holding discussions on security topics and drive automation where required.
— Provide the Engineering team with well-researched security advice to demonstrate vulnerabilities.
— Implementation and support of IT security control.
— Responding to security incident notifications in event management, by investigating and analyzing potential security incidents.
— Project analysis to provide new features or security features.