{"id":122534,"url":"https://alion.io/job/hr-me-application-security-engineer-devsecops","title":"Application Security Engineer / AppSec-инженер","company":{"id":47036,"name":"HR ME","domain":"hrme.agency","url":"https://alion.io/company/hr-me","size_band":null,"is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"HeadHunter","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Moscow, Russia"],"countries":["RU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":34000,"max_usd":65000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-09-23T13:34:12Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-10-12T15:55:38Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":2,"flags":["repost"],"days_open":18},"description":"Привет! Мы ищем Application Security Engineer в международный холдинг.\n Роль подойдет специалисту с сильным опытом в AppSec, который хочет развиваться в направлении AI Security.\n Стек: Linux, Docker, SAST / DAST / IAST, CI/CD, один или несколько языков программирования.\n Задачи:\n Внедрять практики безопасной разработки и процессы Secure SDLC в AI-проекты.\n Сопровождать команды разработки на всех этапах: от проектирования архитектуры до выхода в продакшн.\n Настраивать, интегрировать и поддерживать SAST-, DAST- и IAST-решения.\n Встраивать инструменты безопасности в CI/CD-пайплайны.\n Анализировать результаты сканирования, определять реальные риски и помогать разработчикам устранять уязвимости.\n Исследовать код, сгенерированный с помощью AI, выявлять потенциальные уязвимости, закладки и небезопасные конструкции.\n Консультировать команды по вопросам безопасности, включая сотрудников, которые создают код с помощью AI-инструментов.\n Участвовать в Threat Modeling для новых продуктов и функциональности.\n Развивать внутренние инструменты информационной безопасности и автоматизировать рутинные процессы с помощью Python.\n Участвовать в защите агентных AI-систем: настройке политик изоляции, контроле потоков данных, песочниц и выходной валидации.\n Требования:\n 3+ года коммерческого опыта в роли AppSec Engineer / DevSecOps / Security Engineer.\n Уверенное знание одного языка программирования, опыт с несколькими языками будет плюсом.\n Практический опыт работы с Linux и Docker.\n Опыт использования и интеграции SAST-, DAST- и IAST-инструментов.\n Понимание принципов построения CI/CD-пайплайнов и безопасной разработки.\n Умение анализировать уязвимости и понятно объяснять разработчикам способы их устранения.\n Готовность аргументированно отстаивать требования безопасности и находить общий язык с техническими командами.\n Интерес к AI Security и желание развиваться в этом направлении.\n Условия:\n Формат работы: офис 5/2 с 10 до 19, Москва-Сити.\n Оформление по ТК РФ, отпуск 28 календарных дней.\n ЗП: фиксированный оклад (обсуждаем на интервью).\n Ежегодная индексация и премирование по результатам работы.\n Корпоративная техника и современное зарубежное ПО.","description_format":"text","description_chars":2164,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Russian","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security"],"lifecycle":[{"event":"open","at":"2026-08-25T15:20:14Z"},{"event":"reopen","at":"2026-09-15T02:34:45Z"},{"event":"6","at":"2026-09-23T13:34:12Z"}],"visa":[],"liveness":{"score":31,"band":"fade","label":"Fading","p_open":1,"p_active":0.339,"p_room":0.9,"age_days":18,"expected_fill_days":30,"reasons":["conf:19","repost:2","agency","velocity","win:mid"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/hr-me-application-security-engineer-devsecops","json_url":"https://alion.io/job/hr-me-application-security-engineer-devsecops.json","meta":{"generated_at":"2026-10-12T19:39:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31746,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":47036},"rest":"https://alion.io/mcp/rest/get_company?id=47036"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhr-me-application-security-engineer-devsecops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhr-me-application-security-engineer-devsecops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhr-me-application-security-engineer-devsecops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hr-me-application-security-engineer-devsecops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhr-me-application-security-engineer-devsecops"}]}