Position: Application Security Researcher
Company: Moon Active
Category: Security
Experience required: 3y
English level: upper

You will work with internal development teams to ensure Moon Active mobile games are designed and implemented securely.

**Responsibilities:**
Primarily responsible for working closely with the development teams to conduct design review, code review, and dynamic analysis;
Identify, communicate, and drive the resolution of vulnerabilities;
Research and advocate for new security solutions and technologies;
Continue to drive security evaluation earlier in the cycles through iterative security testing;
Implement and govern automated secure coding tools and processes (SAST, IAST) to review code as it is written, promoted through the development lifecycle, and into production;
Operate as an incident responder for triage pertaining to web-based vulnerabilities.

**Requirements:**
Proven experience in high-level code auditing on backend;
Proven experience in AppSec research, including deep understanding of major AppSec attacks, vulnerabilities and mitigations including SQL Injection, Deserialization, RCE, etc.
Familiarity with a wide range of programming languages (Go, Node.js, JavaScript, etc.) and Software Development Life Cycle (SDLC);
Familiarity with cloud environments - AWS and GCP in particular;
Familiarity with a wide range of database types and architectures.

Optional: You found a high-severity vulnerability in a popular app;
Optional: familiar with mobile application platforms and APIs like Google Play, App Store.