Position: Application Security Engineer
Company: Dev.Pro
Experience required: 2y
English level: intermediate

Together, we are developing an innovative business platform for capital market professionals. The goal of the product is to document and distribute financial instruments on a more standardized basis. We use Blockchain to connect notarized data to digital tokens, which represent proof of ownership of assets. You'll be in charge of developing and enhancing security on the project, creating a a safe development cycle and integrating security into solutions that the team develops. What's in it for you:
• A chance to undertake a new App Security initiative from scratch and influence processes on the project, as the client and the team are open to new ideas
• Dive into a fintech domain and learn from experts in the industry, directly communicating with the client

**Qualifications and experience:**
• Technical degree (information or cyber security, computer science etc.)
• 2+ years’ experience in secure development or application security audit
• Understanding of the development and its stages
• Understanding of how security controls can be used within the application (e.g. authentication, integrity check, encryption, security assurance, logging)
• Understanding of web application architecture, operating systems, cloud architecture, containerization
• Experience in configuration security testing solutions, knowledge of threat modelling and application security risk assessment
• Ability to explain security issues to engineering teams
• Intermediate+ English level

**Nice to have:**
• Experience in web application development
• Experience in using popular security testing tools (e.g. Acunetix, Burp, OWASP ZAP, Nessus/Tenable.io)
• Experience in bug bounty programs or penetration testing
• Knowledge of process automation

**Key responsibilities:**
• Provide security guidance and advice in terms of application security to engineering teams
• Perform application security requirements and control their implementation through the whole development process
• Perform threat modelling and application risk assessment to build modern and secure applications
• Assist with penetration testing of applications
• Integrate security best practices into the development processes
• Implement and maintain application security testing solutions (SAST/DAST/IAST) and their integration into CI/CD pipeline

**Our benefits:**
✅ Professional and personal growth: ability to shift your career path, access to English courses, online training programs, webinars, and workshops
✅ Healthcare: healthcare medical insurance and healthcare kit (gym, sports nutrition etc.)
✅ Fun online activities and team-building events
✅ 18-20 paid time-off days per year, 5 absence-due-to-illness days and 21 days of extraordinary medical leave per year