от компании (организации): Coins.ph в городе (населённом пункте): Москва, Россия
в отрасли экономики "Информационные технологии, интернет, телеком" → "Компьютерная безопасность"
с заработной платой: от 3700 до 6500 USD
Вакансия № 12192359 добавлена в базу данных сайта Работа в Москве и Московской области (МО, Подмосковье): Четверг, 8 августа 2024 года.
Дата обновления вакансии № 12192359 на сайте Работа в Москве и Московской области (МО, Подмосковье): Пятница, 27 сентября 2024 года.
Обращаем Ваше внимание, что на момент обращения к работодателю вакансия № 12192359 может быть уже занята. Администрация сайта Работа в Москве и Московской области (МО, Подмосковье) приносит извинения за доставленные неудобства.
Требования к опыту работы:
более 6 лет
Тип занятости:
полная занятость
График работы:
удаленная работа
Дополнительные сведения о вакансии: Application Security Engineer (Security Team)
Coins is Southeast Asia's leading platform that allows anyone to access financial services from their phone (banking, remittances, mobile air-time (prepaid load), bill payments, game credits, online shopping, and digital currency purchases). Founded in 2014 in the Philippines and serving over 5 million customers, Coins' mission is to increase financial inclusion across Southeast Asia's 650 million population, which remains largely unbanked.
SKILLS TO HAVE
- 3+ year(s) of experience in Information Security
- Knowledge how modern web applications (SPA, PWA) and mobile applications (Android, iOS) are builds
- Experience in using scripting languages e.g. Python, Golang to automate tasks and manipulate data
- In-depth knowledge of OWASP Top 10, OWASP Mobile Top 10, SSDLC
- Experienced with Docker, Kubernetes, modern CI/CD
- Familiar with WAF, SAST, DAST tools
- Excellent problem solving skills
- Excellent verbal and written communication in English language
- Ability to support concept infrastructure & security as code
SKILLS NICE TO HAVE
- Participated or managed BugBounty programs and know typical problems and how to deal with them
- Knows how to work with OAuth, JWT, SAML, 2 Factor Authentication
- Familiar with Cross Origin Resource Sharing и Content Security Policy
- Familiar with Vulnerability Management
- Worked before with one of dynamic code analyzers (DAST) tools like Burp, ZAP, Acunetix, IBM AppScan or Qualys WAS
- Worked before with one of static code analyzers (SAST) tools like Solar inCode, Checkmarx, Veracode, HP Fortify or Kiuwan
- Worked before with one of Web Application Firewall (WAF) solutions like Wallarm, PTAF, mod_security, Cloudflare
THINGS TO DO
- Implement SSDLC in fast-growing company for web and mobile applications
- Design and implement new security solutions, tools to protect company assets and applications
- Make security audits of web and mobile applications
- Implement Security Champions practice
- Maintain BugBounty program
WE OFFER
- To be an important part of the development of a cool mobile application
- Team with professionals. Our guys are the best at their work
- Career and professional growth. It means that we invest time and money in your career(IT conferences, courses, training, software — all that you need for good work)
- You can be sure that in our company a warm welcome awaits you. Our HR Team and your Team Leader can help you to be a part of Coins
- Remote work. You may work from home or the beach. No matter. The main thing is the result
- Flexible vacations
Откликнуться на эту вакансию: Application Security Engineer (Security Team)
Предыдущая вакансия:
Вакансия № 12192352 на должность Инженер по технадзору от компании ООО ГК Партнер в городе (населенном пункте) Москва