Position: Application Security Engineer
Company: Mira- top recruiting
Category: Security
Experience: 3y
English level: intermediate

Один з найбільших банків України в пошуках Інженера з інформаційної безпеки, який прагне працювати в динамічному середовищі та розділяє цінності взаємної довіри, відкритості та ініціативності. Ми прагнемо знайти цілеспрямованого професіонала, який вміє працювати в режимі багатозадачності, орієнтованого на якість та результат.

About project
Our project covers thousands of applications and hundreds of personnel. Our mission -- apply secure SDLC practices to each team, to each project. We research the best approaches and tools, apply for small groups then scale to the whole organization. Also we develop standards, guides, checklists, policies, etc. Secure SDL practices include but are not limited to creating and improving secure development standards and guidelines, self-service security assurance tooling, SAST and DAST solutions. Our scope of secure SDLC includes all practices from Strategy and Metrics to Operational Management.

Main duties:
- S-SDLC practices evaluation, implementation and development
- Tools applying, automation processes development and practices control
- Carrying out of technical research
- Security audit of the applications portfolio, infrastructure and technologies used
- Advising development teams and other departments on information security issues
- Workshops, presentations for employees training
- Сreation of regulatory documents for implemented practices and reports providing
- Work with project stakeholders

We’ll expect:
- BS/MS degree in Computer Science (preferably in the field of information security)
- Adept experience working in security-focused roles for 3+ years (cyber security, SW development, IT management etc.)
- Solid understanding of secure SDLC practices (OWASP SAMM / Microsoft SDL)
- Solid understanding of web application security, architecture and components (ELK, MySQL, Redis, Rabbit, Apache Kafka…)
- Knowledge of network protocols
- Ability to review source code (Java, JS, Python, PHP)
- Experience reviewing architectural design and performing threat models of software components
- An ability to reason about security decisions and communicate security requirements
- Experience leading projects from start to finish and mentoring other security practitioners
- English — Intermediate level
Would be great:
- Penetration testing experience
- Software development experience
- Certifications (CISSP, CEH, CSSLP, CISM, etc.)

We offer:
- Work in the largest and most innovative bank of Ukraine
- Official employment and 24-days’ vacation
- Competitive salary
- Medical insurance
- Corporate trainings
- Interesting projects, ambitious tasks and dynamic professional development with a friendly strong team