Position: DevSecOps Engineer
Company: Parimatch Tech
Experience required: 3y
Category: Other
English level: intermediate
Published: 2020-07-01T00:00:00+03:00

**We invite those who fired up to:**
— Audit and implement security checks and features for existing CI/CD processes; 
— Analyze solutions for continuous monitoring and remediation of security defects across the application lifecycle; 
— Designing and implement security controls for new company’s products/features/3-rd parties integrations during SDLC process; 
— Design and implement security controls for infrastructure in "security as a code" approach and align it with company processes; 
— Working closely with delivery and infrastructure teams to drive security issues and controls to resolution; 
— Design automated hands-on threat modeling and risk evaluation processes for SDLC.

**Essential professional experience:**
— Experience of 3+ year as ITSec engineer/AppSec specialist/Blue Team member in a software product company or as an independent researcher; 
— Experience in CI/CD automation, code quality tools, Web/Native security, technical security assessment, experience with docker security, GitOps approach; 
— Good understanding of computer networks (VLAN, IP addressing, security zones of trust, etc.); 
— Understanding of common types of security attacks (DNS cache poisoning, ARP spoofing, DDoS, XSS, CSRF, SQL Injection, etc.); 
— Experience with Docker, AWS, k8s, Nomad, Vault, orchestration tools like Ansible, SaltStack, Terraform; 
— Scripting development using a variety of tools like Bash, Python, Perl, Go;

**Desirable skills:**
— Penetration testing / CTF / Bug Bounty experience; 
— Experience with PCI DSS / SOC / GDPR; 
— Knowledge in network security area; 
— Security certifications such as OSCP, CSSLP, GIAC.

**We care of your:**
Health
— Medical insurance/Sport compensation;
— Sport club participation (football, running, basketball or swimming clubs);
— Tasty and healthy free breakfasts;
— 100% paid sick leaves;
— 20 working days of paid vacation.
Wealth
— Competitive salary and сonstant encouragement for your efforts and contribution;
— Bonuses according to company’s policy;
— Welfare (financial support in critical situations).
— Gifts for significant life events (marriage, childbirth).
Personal and professional growth
— Individual annual training budget with an opportunity to visit paid conferences, training sessions, workshops, etc.;
— Free corporate library;
— Opportunity to visit our non-stop internal meetups: open talks, IT Pump, etc. as a participant or a speaker and exchange knowledge;
— A world-class team of T-shaped skilled professionals that share knowledge and support each other.
Leisure time
— Corporate parties and events (Pub Quiz, Carquest, bowling championships, etc.);
— PM Foundation activities (social responsibility events);
— Weekly events aimed at culture, arts, soft skills development.