Tbilisi, Georgia Hybrid Full-time

Devexperts is hiring an Application Security Engineer

We are looking for an Application Security Engineer to join the Information Security Team. The Application Security Engineer will work closely with software development teams, product owners, and stakeholders to design, implement, and maintain robust security practices throughout the software development lifecycle (SDLC). The Application Security Engineer will be responsible for identifying and mitigating security vulnerabilities within applications, systems, and APIs, ensuring secure coding practices, and helping to maintain compliance with relevant security standards such as OWASP Top 10, NIST, and ISO/IEC 27001. This role will play a crucial part in strengthening the organization’s security posture, promoting security best practices, and ensuring the safety and integrity of the company’s software applications. We expect the Application Security Engineer to: Conduct regular security assessments of applications, including code reviews, static/dynamic analysis, and penetration testing. Collaborate with development teams to design and implement security controls and integrate security into the software development lifecycle (SDLC). Lead and participate in the identification and remediation of security vulnerabilities in applications, APIs, and third-party services. Provide security guidance on secure coding practices, threat modeling, and vulnerability management to development teams. Implement and enforce security best practices for secure coding, API security, and encryption across application architectures. Stay up-to-date with the latest security threats, vulnerabilities, and trends, applying relevant knowledge to mitigate risks in applications. Develop and maintain automated security testing tools, frameworks, and processes for continuous security integration within CI/CD pipelines. Support risk assessments and threat modeling for new and existing applications, helping to prioritize security remediation efforts. Participate in incident response activities related to application security, providing expertise to investigate and remediate security breaches. Create and deliver security training and awareness programs for developers to promote a culture of security within the development teams. Support vulnerability management and remediation efforts, tracking and verifying the resolution of identified issues. Ensure compliance with internal security standards and external regulatory requirements (e.g., GDPR, PCI-DSS, HIPAA). Collaborate with cross-functional teams, including DevOps, infrastructure, and security operations, to ensure a cohesive approach to application security.

Job Details

Location Tbilisi, Georgia

Work mode Hybrid

Employment Full-time

Category Security

Posted 5 months ago

About company

Devexperts has been working for nearly two decades consulting and developing for the financial industry. We solve complex technological challenges facing the most well-respected financial institutions worldwide. By becoming a part of Devexperts, you’ll become a part of a company that fosters self-improvement and actively seeks out-of-the-box ideas. Our teams work together to create the next generation of financial software solutions. We welcome all candidates who believe, as we do, that innovation is grounded in education. Job Description: We are looking for a Site Reliability Engineer (SRE) to fill the open position in a team that develops and supports a few big trading platforms. You will help the existing team to ensure access to various markets to end users from a lot of countries. You will be responsible for maintaining availability, automating release/deploy process, seamless monitoring, and alerting of all the solutions. We expect the Site Reliability Engineer to: * Work closely with developers for prototyping, and designing new features as part of the infrastructure, * Deploy, install, configure and maintain sophisticated Trading/Finance and related software, * Configure bare metal instances by using Infrastructure as Code, * Build & maintain CI/CD pipelines, * Make key decisions for scalability, reliability and accessibility, * Install and manage in-house developed and external well-known monitoring systems, * Design, deploy and configure cloud-based servers and networks provision servers and storage, configure firewalls, VPN, monitoring, etc, * Administrate UNIX infrastructure – installation, configuration and maintenance, * Work with the Nexus and GIT repositories. Qualifications: Must-have skills: * 5+ years of experience in the field, * Experience as an SRE or DevOps, * Strong experience with OS-level administration on Linux and/or UNIX, * IAAS solutions using Ansible and/or Terraform, * Experience with Docker containers orchestrating (OpenShift/Hashicorp), * Know how to read and analyze errors, * In-depth knowledge of TCP/IP and ISO/OSI stack, * Experience with monitoring and logging tools (Zabbix, Elasticsearch or Opensearch, Grafana, Kibana, etc), * Experience in working with Apache, Nginx, HAproxy, Envoy, etc, * Administration of UNIX infrastructure – installation, configuration and maintenance, * Configuring instances by using Infrastructure as Code, English level not lower than B2. Nice-to-have skills: * Experience with support of JVM application (garbage collection, memory leaks), * Experience with software development, * Hands-on scripting experience with Bash, Python, and/or Groovy, * Experience with configuring TeamCity CI/CD pipelines, * Strong ability to solve problems using code and scripting. Additional Information: Care for the employees is one of Devexperts' core values. For the suggested position, we offer a benefits package that will guarantee the comfort of our new teammate. Flexibility benefits: * Possibility of hybrid/remote work mode in Georgia, Flexible working hours. Health and recreation benefits: * 24 working days of paid vacation, * Fully paid additional wellness days (3 days per year), * FitPass (sport and related activities) access, Medical insurance - VIP package. Facility benefits: * Modern office with new equipment, * PlayStation and table football in the office, * Meals in the office, Free drinks and snacks. Community benefits: * Teambuilding activities, * Corporate parties, * Football club, * Billiard club, * Speakers' club, * Free admission to corporate external events, * Possibility of joining conferences and professional fairs, Personal branding development support. Professional training benefits: * Georgian language courses for foreign employees, * Unlimited access to self-learning platforms, * Certification opportunities, Mentorship Program. Social benefits: * Parental bonus, * Referral bonus, * Blood donation paid leave, * Gifts for employees, * Gifts for children.

All jobs at Devexperts Visit website