Application Security Engineer (вакансія неактивна)

— Experience with Application Security Testing (SAST, DAST, SCA, etc.);
— Experience in Security Software Development Life Cycle(SSDLC);
— Experience with application security tools like SonarCube, Veracode, Acunetix, BurpSuite, OWASP ZAP, Metasploit, etc;
— Experience with OWASP Software Assurance Maturity Model (SAMM);
— Experience in implementation and assessment of OWASP ASVS;
— Experience in Threat modeling, Business impact analysis;
— Knowledge of OWASP TOP 10;
— Knowledge of PCI-DSS;
— Knowledge of GDPR;
— Experience with AWS

— Participation in bug bounty programs and security research;
— Certifications in Security;
— Team Leading.

— Work for a Swedish company with a portfolio of over 20 global free-to-play (F2P) projects that have been translated in 15 languages;
— Participate in the full product development cycle;
— Grow your career with an international company;
— Official/contract employment;
— Flexible working schedule;
— Full benefits package;
— Comprehensive, company-subsidized medical insurance;
— Educational programs in English with highly qualified instructors;
— Comfortable offices in seven cities across five different countries;
— Relocation program to help you organize your move and keep costs down;
— Earn bonuses from project revenue for the teams you’re involved in;
— Performance share program for key employees;
— R&D Project Development: opportunities for creating your own project within the framework of the company;
— Paid conferences, trainings, and workshops;
— Internal training platform (educational webinars for all specializations within the company);
— Fun and educational hangouts/master classes;
— Attend our annual internal TeamUp conferences abroad;
— Participate in charity projects;
— Free exercise classes.

— Serve as the subject matter expert for application security, providing guidance to Engineering and Product teams.
— Develop secure system design and secure coding recommendations.
— Design and implement SSDLC practices including automated and manual security tests, code review, etc.
— Integrate security controls in CI/CD and operational pipelines.
— Checking the source code and testing web applications, API for vulnerabilities.
— Review of software and infrastructure from a security point of view at all stages of the software development lifecycle.
— Manage product bug bounty and drive different program initiatives

G5 Entertainment AB — шведский издатель и разработчик мобильных игр, в которые играет более 250 миллионов пользователей по всему миру. G5 имеет многолетний опыт разработки игр в разных жанрах и на разных платформах. В нашем портфолио: Hidden City^®, Mahjong Journey^®, Jewels of Rome^®, Homicide Squad^®, The Secret Society^® и другие.
Наша команда — это 600+ талантливых, увлеченных играми профессионалов из 5 стран и 7 городов.
G5 ищет кандидата на должность Application Security Engineer.