{"id":3959442,"url":"https://alion.io/job/digital-league-devsecops-inzhener-2","title":"DevSecOps-инженер","company":{"id":979,"name":"Digital League","domain":"digitalleague.ru","url":"https://alion.io/company/digitalleague","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"HeadHunter","truth_index":{"grade":"A","score":85,"open_postings":32,"ghost_share":0.219,"stale_share":0,"repost_share":0.438,"time_to_fill_p50_days":15,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Novosibirsk, Russia"],"countries":["RU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"GitLab CI","optional":false},{"name":"Gitleaks","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"Semgrep","optional":false},{"name":"TeamCity","optional":false},{"name":"Terraform","optional":false},{"name":"Trivy","optional":false},{"name":"DefectDojo","optional":true},{"name":"Kaspersky","optional":true},{"name":"OWASP Dependency-Track","optional":true}],"status":"live","first_seen_at":"2026-11-09T10:35:33Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-08T23:59:27Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Чем предстоит заниматься:\n-Встраивать проверки безопасности в CI/CD: SAST, SCA, DAST, поиск секретов, сканирование контейнеров и IaC\n-Строить и сопровождать безопасный конвейер сборки и поставки ПО\n-Обеспечивать безопасность инфраструктуры разработки: репозиториев, систем сборки, хранилищ артефактов, сред тестирования\n-Внедрять управление секретами и контроль доступа в инфраструктуре разработки\n-Обеспечивать безопасность цепочки поставок: SBOM, контроль сторонних компонентов, подпись артефактов\n-Автоматизировать сбор и обработку результатов проверок, интегрировать их с системами управления уязвимостями\n-Обеспечивать быструю сборку и выпуск исправлений при обнаружении критичных уязвимостей\n-Реализовывать требования ИБ, сформированные AppSec, в инфраструктуре и пайплайнах\n-Участвовать в построении DevSecOps-методологии в компании\nМы ждём:\n-Опыт построения и сопровождения CI/CD (GitLab CI, Jenkins, TeamCity или аналоги)\n-Опыт интеграции средств анализа в пайплайны: PT AI, AppChecker, CodeScoring, Semgrep, Trivy, Gitleaks, OWASP ZAP или аналоги\n-Опыт работы с Docker и Kubernetes и понимание их безопасности\n-Опыт работы с IaC (Terraform, Ansible) и проверки конфигураций на безопасность\n-Опыт работы с системами управления секретами (HashiCorp Vault или аналоги)\n-Уверенное владение скриптовыми языками (Python, Bash) для автоматизации\n-Понимание основных типов уязвимостей (OWASP Top 10, CWE Top 25)\n-Опыт в DevOps или ИБ от 3 лет, из них не менее 1 года в задачах DevSecOps\n-Умение работать в команде и договариваться с разработчиками\nБудет плюсом:\n-Знание ГОСТ Р 56939-2024 в части требований к инфраструктуре и конвейеру разработки\n-Опыт работы с российскими средствами защиты контейнеров (Luntry, PT Container Security, Kaspersky Container Security) и платформами вроде Deckhouse\n-Опыт работы с Dependency-Track, DefectDojo или аналогами\n-Опыт работы с Nexus или Artifactory\n-Высшее образование в области ИБ или ИТ\n Что мы обеспечим:\n Гибкое начало рабочего дня с возможностью выбора удобного формата работы\n Современную технику для работы\n Возможность расширить свою экспертизу, используя современный стек технологий\n Сессии профессионального развития, конференции (посещения или самостоятельные выступления), курсы и тренинги","description_format":"text","description_chars":2245,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"Russian","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","IT Consulting & Digital Transformation","Systems Integrators","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-09T10:38:57Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":15,"reasons":["conf:1","win:early"],"computed_at":"2026-11-09T11:58:19Z"},"pay":null,"html_url":"https://alion.io/job/digital-league-devsecops-inzhener-2","json_url":"https://alion.io/job/digital-league-devsecops-inzhener-2.json","meta":{"generated_at":"2026-11-09T11:58:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14509,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":979},"rest":"https://alion.io/mcp/rest/get_company?id=979"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdigital-league-devsecops-inzhener-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdigital-league-devsecops-inzhener-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdigital-league-devsecops-inzhener-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/digital-league-devsecops-inzhener-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdigital-league-devsecops-inzhener-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3959442}},{"tool":"search_jobs","arguments":{"company":"digitalleague.ru","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3959442},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}