Informacje o stanowisku

Jeden z naszych Klientów z branży telekomunikacyjnej potrzebuje na swój pokład Application Security Experta.

Data startu: lipiec.

Lokalizacja: praca hybrydowa z biura w Warszawie 2 dni w tygodniu, 3 zdalnie.

Zaangażowanie długofalowe.

Kontrakt przez Avenga.

• 4+ years of full-time commercial application security experience.
• 4+ years of experience in software development, preferably in cloud environment.
• Experience in architecting and building application security on modern tech stacks across multiple platforms (web, mobile, desktop).
• Prior experience in performing threat modelling and secure design reviews.
• Familiarity with cloud services and their security best practices and secure design patterns - AWS especially.
• Kubernetes and containerization security know-how.
• Knowledge of common appsec vulnerabilities like OWASP Top 10 and cloud security gaps.
• Knowledge of standards like OWASP Testing Guide, OWASP ASVS, NIST and SANS top 20.
• Proficiency in modern and common web stack technologies (HTTP, HTML5, AJAX, REST, ...).
• Understanding of basic cryptography (encryption, hashing, MACs, digital signatures, TLS, password storage) and how they are applied in web applications.
• Knowledge of protocols (OAuth, SAML, OIDC), flows and best practices.
• At least basic know-how in networks.

Jeden z naszych Klientów z branży telekomunikacyjnej potrzebuje na swój pokład Application Security Experta.

Data startu: lipiec.

Lokalizacja: praca hybrydowa z biura w Warszawie 2 dni w tygodniu, 3 zdalnie.

Zaangażowanie długofalowe.

Kontrakt przez Avenga.

,[Identify opportunities to automate and standardize application security controls and cooperate with the CI/CD team., Analyze source code to mitigate identified weaknesses and vulnerabilities., Create guidelines and application security standards., Review and check automated security testing results., Perform software architecture design reviews for both on-prem and cloud deployments., Work with engineering teams to help architect and implement solutions that are secure by design., Define, document, and supervise implementation of security guidelines and standards., Build frameworks and libraries to provide security by default. Requirements: AWS, CI/CD, Security, Cloud, OWASP Tools: Agile, Scrum. Additionally: Sport subscription, Private healthcare, Small teams, International projects, Free coffee, Canteen, Bike parking, Playroom, Shower, Free snacks, In-house trainings, In-house hack days, Modern office, Startup atmosphere, No dress code.

Praca Wrocław

Chief security officer Wrocław

Wrocław - Oferty pracy w okolicznych lokalizacjach