Application security engineer

We are looking for an Application Security Engineer to join Exness Protection Devision. You will identify existing and emerging security threats and protect Exness Group of Companies from them, maintaining business continuity and regulatory compliance in respective areas.

• Work directly with the business units to facilitate building secure workflows, processes, systems, and services.
• Maintain effective communication and coordination with Exness Technology teams in security-related areas.
• Ensure that information assets and technologies are properly protected, which includes the following:
  • Development and implementation of practice-driven security controls to software development-related processes.
  • Development of data protection measures in product to prevent its loss and misuse.
  • Software and system design review from a security perspective at all stages of the software development lifecycle.
• Consult software development teams in a security area.
• Manage security incidents from the products side build reliable infrastructure for its investigation and forensics.
• Continuously develop security-related processes in the software development area.
• Manage and develop security education programs for Software Engineers, Architects, Product Managers. 

• At least three years of practical experience in Application Security and five years of experience in the IT/Security area.
• Ability to leverage business communication skills to inform, convince, and educate software engineers to enable effective application security activities and processes.
• Deep knowledge of most common application-level vulnerabilities, ways of exploitation, and protective measures.
• Practical experience in web application security research.
• Hands-on experience with modern information protection systems, including open source products.
• Deep understanding of security aspects of virtualization, containerization, and cloud services (AWS).
• Cryptography basics.
• A broad spectrum of technical knowledge in the following areas (the list is not exhaustive): Linux family, Docker, Kubernetes, AWS, Vault, git.
• Good knowledge of essential technologies and protocols (TLS, HTTP, Web Socket, DNS, OAuth2, OIDC, etc.) and threats to them.
• Hands-on experience in development and/or automation.
• Fluent Russian and English language (Upper-Intermediate or higher).

• Project management experience
• OSWE/CCTAPP certifications are a plus.
• Security Operations Center or penetration testing experience.
• Digital forensics experience.
• Team management skills are a plus.
• Well-developed soft skills are a plus.

• A reasonably estimated and attractive package (competitive salary based on your expectations and internal benchmark) with the ability to start working remotely anywhere in the world; 
• Company Car - the  company will provide Exness-branded cars to those who relocated, parking near the office or a bus tickets;
• We’ll pay school or kindergarten fees (Annual Registration or Tuition Fees, Regular term fees, Half day service to kindergartens) for your children between 0 years - 18 years, up to three (3) children; 
• L&D - support your need to replenish your knowledge and acquire new skills to do your job better via Continuous product education, Professional training & Certifications, Soft skill training, Language classes, and our very own Exness library ;
• Sports Benefits - Our very own Sports Club with dedicated coaches doing group and individual training, on-site and online, sharing healthy recipes and life hacks + Free Sanctum Club Membership for you and your spouse. Jet Skis (if you have a speed boat operator license) ;
• Medical - Besides having a Corporate Doctor, we cooperate with one of the biggest international insurance companies to provide medical insurance for you and your families. Coverage is provided for you, your spouse, and your children up to 18 years old. It includes Inpatient, Outpatient, and international support. 

Just apply today and the recruiter will arrange a video call👌