Long applicationsign-up on hh.ru
Application Security Engineer
Smart Apply
Similar jobs
Salary
≈ $13k – $31k per year (Estimated)
Location
In office (Bishkek)
Seniority
Middle · 3+ years exp
Employment
Full-Time
Confirmed on the employer's own hiring board on Nov 14, 2026. First seen by Alion on Oct 30, 2026.
Overview
Company
Impact
Profile match
Headquartered in Bishkek, Kyrgyzstan, Kyrgyzkommertsbank is a universal commercial bank providing financial products and services to retail consumers, small and medium-sized enterprises (SMEs), and corporate clients. The institution offers personal and business deposit accounts, consumer and commercial lending facilities, foreign currency operations, international money transfers, and payment card issuing across major networks including Visa, Mastercard, and the national Elkart system. Supported by a network of regional branches, ATMs, and its proprietary KKB mobile banking platform, it delivers accessible payment processing, cash management, and day-to-day banking solutions throughout the Kyrgyz Republic.
Обязанности:
- Проводить аудиты безопасности мобильного приложения.
- Проводить регулярный ручной и автоматизированный Secure Code Review мобильного приложения (Kotlin/Swift) и бэкенд-сервисов (Java).
- Встраивать инструменты автоматического поиска уязвимостей (SAST, SCA) в CI/CD пайплайны на базе Jenkins и контейнеризованную среду Kubernetes.
- Приоритизировать риски, помогать команде разработки в их устранении.
- Участвовать в проектировании архитектуры новых банковских фичей, API-интерфейсов и взаимодействия с БД (PostgreSQL, MySQL) на всех этапах разработки.
- Взаимодействовать с продуктовыми командами и повышать экспертизу разработчиков в вопросах написания безопасного кода.
- Опыт в AppSec / Mobile Security / разработке от 3 лет (опыт в банковском секторе будет преимуществом).
- Уверенное понимание OWASP MASVS и OWASP Top 10 API Security.
- Умение читать и анализировать исходный код на Java, Kotlin и Swift, находить логические уязвимости и ошибки безопасности.
- Опыт с DevSecOps и CI/CD, практика интеграции SAST/SCA решений (SonarQube, Semgrep, MobSF или аналогов) в Jenkins и работы с безопасностью окружения в Kubernetes.
- Понимание принципов безопасного взаимодействия с базами данных (PostgreSQL, MySQL), защиты от SQLi и механизмов шифрования/хеширования.
- Понимание работы SSL/TLS, криптографических алгоритмов, механизмов защиты от реверс-инжиниринга и отладки.
- Умение грамотно составлять отчеты для руководства о состоянии защищенности мобильного приложения.
Будет плюсом:
- Опыт динамического анализа (DAST) и реверс-инжиниринга мобильных приложений.
- Опыт в аудите-безопасности манифестов и конфигураций Kubernetes.
- Наличие профильных сертификаций или участие в Bug Bounty программах.
Free account
Stop reading job ads. Get the ones that fit.
One free account turns this page into a shortlist built around your stack, your level and your pay.
Match on every job. Stack, seniority, pay and location, scored against your profile.
2,286,484 open roles. Read straight off company career pages, refreshed every day.
Unlimited applications. Every one you send is tracked in one place, on-site or on a company board.
3 tailored CVs a month. Rewritten for the exact job you are applying to. Included free.
Free forever. No card. Under a minute.
Your match
How well do you fit this role?
Two answers are enough for a real match. No account needed.
Check my fit
Answers stay in this browser until you create an account.
Recommended for you based on this role
Security
Similar stack
Same company
Bishkek
Apply
AI网络安全与治理工程师-深圳
1 hour ago
In office · Full-Time · Shenzhen
Python
AI/ML
RAG
EU AI Act
NIST AI RMF
Cybersecurity
Ghidra
GDPR
SBOM
Apply
SOC Analyst
1 day ago
$32k – $46k per year (gross) · In office · Full-Time · Johannesburg
AI/ML
Machine Learning
DevOps
Splunk
Cybersecurity
Microsoft Sentinel
MITRE ATT&CK
IBM QRadar
SIEM
Apply
In office · Boulogne-Billancourt
Cybersecurity
ISO 27001
GDPR
SIEM
Apply
Senior Security Engineer
2 days ago
Remote (Canada) · Full-Time · 6+ years exp · Canada
Python
JavaScript
Java
C#
C++
Node JS
AI/ML
LLM
Frontend
GraphQL
DevOps
Rest API
gRPC
GCP
Azure
CI/CD
AWS
eBPF
Cybersecurity
OWASP Top 10
CVSS
EPSS
Veracode
OWASP
Apply
Delivery AI Software Engineer ing Intern
21 days ago
In office · Internship · Bachelor's Degree · Casablanca
Python
JavaScript
Java
TypeScript
C#
Node JS
Python
Flask
FastAPI
Django
Java
Spring Boot
C#
.NET
Node JS
Nest.JS
Databases
MySQL
PostgreSQL
MariaDB
Frontend
Vue.js
Angular
Bootstrap
React.js
Material UI
Ant Design
DevOps
Rest API
Terraform
GCP
Azure
CI/CD
Git
AWS
Docker
Kubernetes
Linux
QA
Jest
Mocha
Apply
Senior Software Engineer - Java
21 days ago
≈ $16k – $37k per year (Estimated) · Hybrid · 7+ years exp · Pune
Java
Kotlin
Java
Spring Boot
Databases
MySQL
Redis
Cassandra
Amazon Aurora
DevOps
Rest API
CI/CD
AWS
AWS Lambda
Amazon EC2
Amazon S3
Amazon Kinesis
Apply
Full Stack Python Developer
21 days ago
≈ $16k – $37k per year (Estimated) · In office · 5+ years exp · Hyderabad
Python
JavaScript
Ruby
Ruby
Sinatra
Ruby on Rails
Databases
MySQL
PostgreSQL
Amazon Aurora
Frontend
Vue.js
Sass
DevOps
CI/CD
Jenkins
Git
AWS
Docker
Management
Scrum
Apply
Hybrid · 5+ years exp · Hyderabad
Python
JavaScript
Java
TypeScript
Swift
Python
FastAPI
Pydantic
Java
Spring Boot
Spring Security
Databases
PostgreSQL
AI/ML
Copilot
Cursor
Claude Code
Model Context Protocol
Prompt Engineering
Function Calling
AI Agents
LLM
Frontend
Angular
Mobile
UIKit
SwiftUI
DevOps
Rest API
CI/CD
Git
AWS
Docker
Bitbucket
GitHub
Cryptography
Vault
Management
Jira
Agile
Scrum
QA
Pytest
Apply
Global Data Engineer Senior Specialist
21 days ago
≈ $24k – $53k per year (Estimated) · In office · Full-Time · 4+ years exp · Bachelor's Degree · Gurgaon
Python
SQL
Databases
Snowflake
Google BigQuery
Amazon Redshift
DevOps
Terraform
GitHub Actions
CI/CD
GitHub
Apply
Apply
Apply
Apply
Apply
Apply
This is one of many
2,286,484 more open roles from verified company boards, updated every day.