{"id":152378,"url":"https://alion.io/job/digital-league-devsecops-inzhener","title":"DevSecOps-инженер","company":{"id":979,"name":"Digital League","domain":"digitalleague.ru","url":"https://alion.io/company/digitalleague","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"HeadHunter","truth_index":{"grade":"B","score":83,"open_postings":32,"ghost_share":0.25,"stale_share":0,"repost_share":0.5,"time_to_fill_p50_days":15,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Novosibirsk, Russia"],"countries":["RU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":16500,"max_usd":36000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":14},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"SonarQube","optional":false}],"status":"live","first_seen_at":"2026-10-09T08:18:25Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-11-06T20:18:52Z","board_verified":true,"closed_at":null,"days_open":29,"trust":{"level":"ghost","repost_count":7,"flags":["repost"],"days_open":28},"description":"Твои задачи:\n Внедрение процессов разработки безопасного программного обеспечения, выстраивание и контроль процессов разработки безопасного ПО в соответствии с требованиями ГОСТ Р 56939-2024\n Контроль уязвимостей, организация и проведение процедур поиска уязвимостей в программном коде (SAST, DAST, SCA)\n Проведение анализа угроз и рисков ИБ\n Формирование и контроль требований ИБ к CI/CD процессам и инфраструктуре разработки\n Управление патчингом, координация процесса оперативного устранения выявленных уязвимостей и выпуска исправлений\n Подготовка технической документации для прохождения согласования ПО на соответствие требованиям заказчика в части разработки безопасного ПО\n Разработка внутренних регламентов, инструкций и рекомендаций по безопасной разработке\n Участие в построении DevSecOps методологии в компании\n Мы ждем от тебя:\n Глубокое знание стандарта ГОСТ Р 56939-2024, ГОСТ Р 71207-2024, ГОСТ Р 71206-2024, методических документов ФСТЭК России по разработке безопасного ПО\n Умение планировать процессы разработки безопасного ПО, формировать требования ИБ к ПО\n Опыт работы со средствами статического и динамического анализа кода (например, Checkmarx, PT Application Inspector, SonarQube, AppChecker и др.)\n Понимание принципов DevSecOps и умение встраивать проверки безопасности в CI/CD конвейеры\n Знание основных типов уязвимостей (OWASP Top 10, CWE Top 25) и способов их нейтрализации на уровне кода\n Умение анализировать и верифицировать предупреждения анализаторов вручную\n Навыки написания скриптов для автоматизации\n Способность доступно объяснять сложные технические проблемы разработчикам и менеджерам\n Грамотная письменная и устная речь, коммуникабельность, умение работать в команде\n Высшее образование в области компьютерной безопасности, ИТ, кибербезопасности или смежной области\n Опыт работы от 3-х лет в сфере ИБ, из них не менее 1 года на позиции связанной с разработкой безопасного ПО\n Что мы обеспечим:\n Гибкое начало рабочего дня с возможностью выбора удобного формата работы\n Современную технику для работы\n Возможность расширить свою экспертизу, используя современный стек технологий\n Сессии профессионального развития, конференции (посещения или самостоятельные выступления), курсы и тренинги","description_format":"text","description_chars":2231,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"Russian","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Russia","iso":"RU","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","IT Consulting & Digital Transformation","Systems Integrators","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-08-25T04:40:08Z"},{"event":"reopen","at":"2026-09-15T01:17:34Z"},{"event":"6","at":"2026-09-17T08:52:10Z"},{"event":"6","at":"2026-09-28T10:10:42Z"},{"event":"6","at":"2026-09-30T10:23:25Z"},{"event":"6","at":"2026-10-02T04:28:11Z"},{"event":"6","at":"2026-10-05T09:11:10Z"},{"event":"6","at":"2026-10-09T08:18:25Z"}],"visa":[],"liveness":{"score":14,"band":"cold","label":"Long shot","p_open":1,"p_active":0.3,"p_room":0.45,"age_days":28,"expected_fill_days":15,"reasons":["conf:9","repost:7","velocity","ghost","win:tail"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/digital-league-devsecops-inzhener","json_url":"https://alion.io/job/digital-league-devsecops-inzhener.json","meta":{"generated_at":"2026-11-07T12:54:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14960,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":979},"rest":"https://alion.io/mcp/rest/get_company?id=979"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdigital-league-devsecops-inzhener"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdigital-league-devsecops-inzhener"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdigital-league-devsecops-inzhener"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/digital-league-devsecops-inzhener\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdigital-league-devsecops-inzhener"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":152378}},{"tool":"search_jobs","arguments":{"company":"digitalleague.ru","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":152378},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}