DevSecOps in Pershiy Ukrayinskiy Mizhnarodniy Bank, AT / PUMB

QUALIFICATIONS AND EXPERIENCE OF THE CANDIDATE

Required:

• Understanding OWASP WEB, Mobile, API security, PCI security standards DSS, SANS critical errors and experience of development and testing according to the requirements of the specified standards
• Understanding of Secure Development Lifecycle/ Secure Code Lifecycle approaches, experience of working with SAST , DAST, IAST tools
• Understanding and/or experience with the technology stack:

•    Java , Spring (Core, Web, Data, Boot)

   SQL (DB2, MS SQL, Postgre, Mongo)

•    REST API concepts, OpenAPI

•    GIT, Maven, Jenkins

•     ESB solutions (IBM Integration Bus)

•    Messaging: RabbitMQ, IBM MQ•    Docker, Kubernetes•    ELK stack

Preferences:

• Experience in using vulnerability scanners (Acunetix, Nessus, etc.) and other security testing tools (Metasploit Framework, SQLMap, Burp Suite, etc.)
• Proficiency in penetration testing techniques
• Experience in the implementation of cybersecurity projects in the development of mobile applications and web applications
  
  Functional duties:
  
  
• Performing the role of an expert in business application development projects in order to assess the security of information systems and applications
• Help in the development of mobile and web application projects for retail and legal entities
• The role of an expert in a project to build an SSDLC (Secure Software Development Lifecycle)
• The role of an expert in the project of creating practical cases of obtaining additional knowledge on cyber security

Why PUMB?

• A unique opportunity to gain experience in building secure and functional business applications in the financial sphere
• Get skills in the popular Security DevOps role
• To deepen the knowledge and skills of implementing the requirements of international security standards in the financial sphere.
• Annual plans higherqualification (conferences, trainings)
• Ambitious friendly team and a flexible approach to tasks.
• Successful Bank with a permanent portfolio of projects.
• Comfortable working environment in the IT office on St. Andriivska, 4 (near the contract square) or remotely.