Position: Application Security Engineer
Company: Dev.Pro
Category: Security
Experience required: 3y
English level: intermediate

Dev.Pro has high-scale projects in fintech, POS, restaurant business, blockchain, and other domains — the companies we partner with make trillions of dollars and work with world-leading brands, such as Taco Bell and Burger King. What's in it for you: 

• Develop a brand new direction from scratch
• Gain experience in different domain areas
• Work with modern technologies (Acunetix, Burp, OWASP ZAP etc.)

**Qualifications and experience:**
• Technical degree (information or cyber security, computer science etc.)
• 3+ years’ experience in secure development or application security audit 
• Understanding of the development and its stages
• Understanding of how security controls can be used within the application (e.g. authentication, integrity check, encryption, security assurance, logging) 
• Understanding of web application architecture, operating systems, cloud architecture, containerization
• Experience in configuration security testing solutions, knowledge of threat modelling and application security risk assessment
• Ability to explain security issues to engineering teams
• Intermediate+ English level

**Nice to have:**
• Experience in web application development
• Experience in using popular security testing tools (e.g. Acunetix, Burp, OWASP ZAP, Nessus/Tenable.io)
• Experience in bug bounty programs or penetration testing
• Experience in application security audit (OWASP SAMM, ASVS, etc.)
• Knowledge of process automation

**Key responsibilities:**
• Provide security guidance and advice in terms of application security to engineering teams
• Perform application security requirements and control their implementation through the whole development process
• Perform threat modelling and application risk assessment to build modern and secure applications
• Assist with penetration testing of applications
• Integrate security best practices into the development processes
• Implement and maintain application security testing solutions (SAST/DAST/IAST) and their integration into CI/CD pipeline

**Our benefits:**
✅ Professional and personal growth: ability to shift your career path, access to English courses, online training programs and conferences
✅ Healthcare kit (gym, sports nutrition etc.), maternity and military leave
✅ Fun online activities and team-building events
✅ IT, facility, and accounting support, including work equipment
✅ 18-20 paid time-off days per year, 5 absence-due-to-illness, up to 60 days of extraordinary medical leave per year, and up to 6 family leaves