Position: Senior Software Security Engineer
Company: MyCointainer
Experience required: 3y
English level: upper

We’re looking for a **Senior Software Security Engineer** to join our rapidly growing company. This role is a unique opportunity to work in a very friendly and ambitious environment with a lot of freedom & decision-making power.

**MyCointainer** has been in business since late 2018. In November 2021 we raised our first financing round and are now backed by strong global VCs. As of today, MyCointainer serves over 120 000 customers globally. Our mission is to enable easy access to various crypto earning protocols for all. We want everyone to benefit from a changing financial landscape and speed up the global advent of crypto adoption. We pride ourselves on very rapid delivery, on which we have a clear-cut focus.

Moving forward with this idea, we need great people to build amazing stuff!


**Requirements:**
- Implement Secure SDLC
- Test, triage, review, and provide recommendations for found vulnerabilities
- Ensure high standards of the security of our products
- Internal and external security check and implementations
- Advisory on the security-related topics

**Skills and Qualifications:**
- Passionate about security and willing to learn, unlearn and relearn if necessary
- Security background (University, relevant prior employment, community activities, CTF)
- Solid understanding of how the web works, Web Application Security concepts, exploits, and threat prevention
- Hands-on exp. with assessment toolset: IDA, GDB, Burp, JEB, scripting (Python), assessment automation tools (fuzz, scan)
- Reverse engineering experience of mobile/web/desktop apps
- Knowledge of how to make security an integral part of the CI/CD pipeline
- Prior experience in Secure SDLC
- Practical experience with white or grey or black-box software penetration testing
- Understanding how to develop secure system design and secure coding recommendations
- Basic knowledge of programming languages (Python/JS/Java/Go) and experience of scripting
- Knowledge of the most common implementations of the Threats (e.g. XSS, SQL Injection, XSRF, buffer overflow, brute force, rainbow tables, DoS, etc.) and how they match the general classification
- Practical experience with Amazon AWS security hardening
Certifications in Security, Cloud, etc. will be an advantage

**Will be a plus:**
- Be a critical thinker and have problem-solving skills
- Good communicator with a bias towards honesty and transparency
- Nice to have one/many certifications such as GXPN, OSCP, OSCE, CEH.
- Awareness of security-related standards and best practices (OSSTMM, OWASP, PTES, NSA Vulnerability, and Penetration Testing Standards)
- Familiarity with network and web application protocols (HTTP, HTTPS,
- Familiarity with OWASP/NIST guidelines
- Familiar with modern DevOps practices and tools
- Experience in Bug bounties, speaking at conferences, blogging, etc. is highly desirable.

**Benefits**
- Competitive salary with reviews and a clear promotion system
- Fully remote
- Flexible schedule
- Unlimited paid vacation and sick leave
- English lessons
- An amazing team of mostly Senior+ specialists that you can learn from
- Friendly environment with lots of freedom and decision making opportunities
- We generally work in very small teams of 2-3 Senior-level developers. Also, we limit stakeholders to max 1-2 decisions makers to run projects fast without any bureaucracy

Our team is made up of thinkers, innovators, and go-getters working on cutting-edge projects. We value passionate and down-to-earth people who are driven to get things done and find creative solutions to problems. We prioritize quality and delivery. We limit meetings to a bare minimum. We like people with a proactive attitude who take responsibility for their tasks, respect their job, and wish to become a part of something great.