No applications. Teams find and message you directly.
✓ Direct apply: you message the hiring person. No ATS.
Join Action tech as a Junior Information Security Specialist (AppSec) to enhance security processes and tools in a remote full-time role.
Join Action tech as a Junior Information Security Specialist (AppSec) to enhance security processes and tools in a remote full-time role.
Responsibilities
- Integrate and support SSDLC / DevSecOps processes in CI/CD
- Configure and develop SAST, DAST, SCA, Secret Detection tools, reducing false positives
- Conduct vulnerability triage: assess risks, prioritize tasks, recommend fixes, and verify corrections
- Participate in code and architecture reviews from a security perspective, conduct threat modeling
- Advise developers on secure development practices
- Audit secure development processes and practices
Requirements
- Independent, persuasive, ambitious, with leadership qualities (or the ability to manage without direct oversight), striving to build a secure infrastructure
- At least 1 year of experience in AppSec / Information Security development
- Understanding of OWASP Top 10, main classes of vulnerabilities, methods of exploitation and protection
- Practical experience with SAST / DAST / SCA tools, such as Semgrep, Burp Suite, ZAP, Trivy, Dependency-Check
- Automation skills in Python or Bash
- Proficient with Git / GitLab
- Ability to clearly document work results and communicate effectively with developers
- Ability to read and write code in at least one of the following languages: Python, Go, PHP, C#
- Will be a plus:
✓ Direct apply: you message the hiring person. No ATS.