Golang Job: Application Security Engineer (Security Team)

Hi there!
We are Semrush, a global IT company developing our own product – a platform for digital marketers.

Tasks in the role

• Work closely with development teams to mitigate security vulnerabilities.

• Select, design, and implement security processes and tools for security testing of developed applications.

• Implement automated security solutions for delivery processes.

• Run monitoring and participate in vulnerability scans.

• Stay up to date on security technology trends and best practices.

You will also leverage your security skills to support and manage the Semrush bug bounty program, participate in our product security incident response actions and other operational appsec responsibilities.

Our ideal new team member considers the security landscape holistically, understanding there are many possible approaches and tactics to reduce risks.

Who we are looking for

• You have an application security background with a focus on scalable approaches to product security.

• You have experience with threat modeling, security design reviews, and security architecture.

• You have excellent written and verbal communication skills and are able to translate security objectives to engineering team tasks.

• You have experience partnering with cross-functional teams to deliver widely impactful security initiatives.

They say there are no perfect candidates, but that might well be you, if

• Participation in bugbounty, HTB, or CTF and the ability to confirm participation with links to the results.

• You have experience with Gitlab/Github CI/CD and YAML pipelines.

• You know the subtleties, can read source code, and identify vulnerabilities in the code of one or more programming languages (Golang, Java, Python).

• Knowledge of one of the programming languages at a level sufficient to automate routine tasks.

• You are familiar with the modern web application development process.

A bit about the team

We will try to create all the right conditions for you to work and rest comfortably

• License for Burp Pro, Metasploit Pro and other hacking tools, as well as help from friendly colleagues.

• Access to online platforms HTB.

• You are free to choose a work format. Work in the office or from home if you want. You can mix as well! Freedom is trending now. So are we.

• Flexible working day start that would suit a night owl and an early bird alike. You can start between 9:00 am and 12:00 pm.

• Health insurance coverage.

• Working from a modern coworking space (or working from home).

• Internet coverage (up to 30 eur/month).

• Corporate events.

• Annual paid vacation (25 days).

• Training, courses, conferences.

• English courses.

• Gifts for employees.