Senior/Staff Application Security Engineer

Навыки

• Burp Suite
• CI/CD
• Java
• JavaScript
• Kubernetes
• Linux
• Machine Learning

О компании и продукте

• Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
• Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
• Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
• The team is responsible for the security of Nebius's main public offerings : Compute, VPC, Managed K8s, Marketplace, Managed Soperator, and others. This includes building out the Secure SDLC , threat modeling, and vulnerability management platforms.

Задачи

• Build and maintain Application Security Posture Management (ASPM) at the Company scale
• Automate and support SAST, SCA tools, etc as part of CI/CD pipelines
• Improving SAST, secrets detection rules. Keeping false positive rate low
• Identify, analyze, and remediate application security vulnerabilities
• Collaborate with development teams to integrate security best practices into the software development lifecycle (SDLC)
• Develop and maintain secure coding guidelines for development teams
• Conduct, run threat modeling and risk assessments for new and existing applications
• Provide development teams with instruments that facilitate security-related work like threat modelling, vulnerability detection, etc
• Stay updated on the latest security threats, vulnerabilities, and mitigation techniques
• Serve as an application security subject matter expert to other teams

Требования

• 6+ years of experience in application security
• Strong knowledge of common application security risks (e.g. OWASP Top 10) and how to mitigate them
• Experience with secure coding practices in languages such as Python, Go, Java, or JavaScript
• Proficiency in a common programming language (such as Go or Python) with a willingness to learn Go, if necessary
• Hands-on experience with security testing tools (Burp Suite, ZAP, Semgrep, etc.)
• Understanding of authentication protocols like SAML or OIDC
• Experience in conducting threat-modeling sessions

Будет плюсом

• Confidence in presenting your ideas and opinions in a manner that can be challenged, while responding well to feedback
• Experience in designing, building, and maintaining security automation
• Experience in translating compliance and regulation requirements into technical specifications
• Experience in exploiting vulnerabilities in web applications, Linux kernels, containers, and networks
• Security certifications such as OSCP or OSWE
• We conduct coding interviews as part of the process
• Benefits & Perks
• Competitive compensation
• Career growth and learning opportunities
• Flexibility and ownership
• Collaborative and innovative culture
• Opportunity to work on impactful AI projects
• International environment and talented teams
• What's it like to work at Nebius
• Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI

Паспорт вакансии

История публикации

Откуда что взялось

Отмечено то, что вывели мы. Без пометки — значение назвал работодатель.

Почему на этом месте в выдаче

Порядок выдачи объявлен контрактом: свежесть решает между днями, полнота и зарплата — внутри дня.