Напиши текст вакансии для должности "DevSecOps/Security Engineer". Название компании: "Информационные технологии". Расположение: Москва. График работы: Удаленная работа. Опыт работы: Более 6 лет. Ключевые навыки: 'Information Security', 'Blockchain', 'Cloud technologies', 'AWS', 'GCP', 'PaaS', 'IaaS', 'MVVM', 'Web', 'Mobile', 'Python', 'JavaScript', 'C', 'C++'

P2P.org is a leading Validator, running over 300+ Nodes, for 25+ Blockchain networks, providing annual yield in respective cryptocurrencies. P2P is backed by 7.000 stakers, securing +$5 Billion assets in staking. P2P.org is initial developer of Lido DAO that is running about 15.5% of Ethereum staking market. We are seeking a Security engineer to join our Security team, become our subject matter expert, and help strategically and tactically shape our overall Product Security Program. Our ideal candidate is a proactive, independent thinker who can translate strategic security goals into an actionable plan and collaborate across domains to execute that plan. Responsibilities:  Drive application and infrastructure security within the overall Secure Software Development Lifecycle (S-SDLC) from inception to delivery. Work closely with product, engineering, and DevSecOps teams to deliver secure software across web, API, mobile, and other platforms. Enable secure software development and delivery by producing and delivering actionable security requirements, guidelines, and design patterns to engineering. Guide team and third party vendors in performing threat models, architecture reviews, code reviews, and pen tests. Build architecture diagrams, process flows, read code, and pen test applications. Other duties as assigned.  Qualifications:  5+ years of proven experience in cybersecurity, software engineering, computer science with a focus on security, or a related field. 2+ years of experience in developing security programs or defining secure architectures Bachelor&#39;s degree in software engineering, computer science, or related field preferred. Certifications in Application Security and Penetration Testing such as OSCP, OSCE, OSWE and CEH or cybersecurity certifications including CISSP, CISM, CompTIA Security+ and GSEC are encouraged. Proficient to expert technical skills in several of the following: One or more development languages: Python, JavaScript, C/C++ Application architectural patterns for modern Mobile and Web applications including Mobile (iOS/Android), MVVM, Single Page Applications (SPAs), REST and GraphQL APIs Testing and security assessment tools and strategies Cloud computing technologies (AWS, GCP) and delivery patterns (PaaS, IaaS, serverless, etc.) Common attacks and vulnerabilities including OWASP Top 10 and SANS CWE 25 Agile fundamentals like Test Driven Development, backlog management, and ticketing systems like JIRA Continuous Integration/Testing/Delivery tools and techniques Agile development methodologies including TDD/XP/Scrum/Kanban