Position: Senior/Middle Security Engineer
Company: Capital Recruiters
Category: Security
Experience required: 3y
English level: intermediate

**Our client** is the largest bank in Ukraine, and they are currently looking for a **Senior/Middle Security Engineer for remote work.**

**Position goal:** Implementation of secure development processes.

**About project** – Their project covers thousands of applications and hundreds of personnel. Their mission – apply secure SDLC practices to each team, to each project. Also they develop standards, guides, checklists, policies, etc. Secure SDL practices include but are not limited to creating and improving secure development standards and guidelines, self-service security assurance toolings, SAST and DAST solutions.

**Requirements:

- 3+ years of experience in the field of information security, development or IT management;**
- Understanding of secure **SDLC practices (OWASP SAMM / Microsoft SDL)** and knowledge of flagship OWASP projects;
- Understanding of the structure and purpose of application components (ELK, MySQL, Redis, Rabbit, Apache Kafka, and others);
- Understanding of web application security;
- Understanding of web applications architecture and components;
- Ability to review source code (Java, JS, Python, PHP);
- Knowledge of network protocols (especially HTTP).

**Would be great:**

- Penetration testing experience;
- Software development experience;
- Certifications (CISSP, CEH, CSSLP, CISM, etc.).

**Responsibilities:**

- Assessment, implementation, and development of S-SDLC practices;
- Application of tools, construction of processes for automation and control of practices;
- Working with project stakeholders;
- Conducting technical research;
- Security audit of the portfolio of applications, infrastructure, and utilized technologies;
- Consulting development teams and other departments on information security matters;
- Delivering reports, workshops, presentations for employee training;
- Creating documents that regulate the implemented practices.

**Company offer:**

- Flexible schedule, full remote;
- Job in the largest and most innovative bank of Ukraine;
- Flexible work schedule;
- Official employment and 24 calendar days of vacation;
- Competitive salary;
- Medical insurance and corporate mobile communication;
- Corporate training;
- Modern comfortable office;
- Interesting projects, ambitious tasks, and dynamic growth;
- Friendly professional team and a strong collaboration.