application security engineer in fintech

ориентир по рынку
вакансия зп не указана
в среднем 325 071 ₽
Загрузи резюме, чтобы видеть мэтчи с вакансией

подготовьтесь к отклику

ai-инструменты

Чтобы адаптировать резюме под вакансию или составить сопроводительное письмо, загрузите резюме

описание

The client is a technology company building product engineering across Fintech, iGaming, and Marketing. It develops high-performing products and launches them at scale.

задачи

  • Design and implement robust security architecture from cloud infrastructure through the application layer, applying secure-by-design principles;
  • Collaborate with product managers, architects, and developers to build and scale the security controls platform ecosystem;
  • Validate and prove security implementations in infrastructure, application deployment manifests, and automated CI/CD pipelines;
  • Define policies, controls, and capabilities to protect global products and environments;
  • Build and automate declarative threat modeling to identify and mitigate application risks;
  • Oversee the product security strategy for migrating legacy data center workloads to AWS;
  • Serve as a trusted cybersecurity advisor to engineering and product teams;
  • Participate in planning cycles and technical committees.

требования

  • Experience analyzing and securing JavaScript and TypeScript applications;
  • Hands-on experience integrating security scanning and tooling into CI/CD pipelines using GitLab and Jenkins;
  • Experience with Infrastructure-as-Code models such as Terraform, Helm, or CloudFormation;
  • Strong development experience in Python and Shell scripting;
  • Deep familiarity with Docker and service mesh technologies such as ISTIO;
  • Strong background in architecture and security reviews, threat modeling, and application risk mitigation within an Agile framework;
  • Strong understanding of supply chain security, software integrity, and secure software delivery;
  • Familiarity with PCI-DSS, ISO 27001, NIST, and GDPR;
  • Nice to have: experience architecting secure services on Kubernetes/AWS, CISSP, CISM, CCSK, CCSP, or CEH certifications.

условия

  • Competitive compensation;
  • Comprehensive benefits package;
  • Health coverage;
  • Flexible working arrangements;
  • Support for advanced certifications;
  • Conference attendance;
  • Research time.

Если просят выйти из iCloud, прислать код из SMS, запустить или установить что-то, перевести деньги — не соглашайтесь: это мошенничество.

Про зарплаты

Анонимные данные по зарплатам и грейдам.
Можно сверить вилку с рынком.

Посмотреть зарплаты

Если просят выйти из iCloud, прислать код из SMS, запустить или установить что-то, перевести деньги — не соглашайтесь: это мошенничество.