Application Security Team Email & Phone Number

We are a team of three specialists: DevSecOps Engineer, Application Security Analyst and experienced Security Team Lead. We can enhance all aspects of Application Security, including but not limited to:- Define and implement all SSDLC practices SCA/OSA, SAST, DAST, Threat modeling, Risk Management etc. at daily work of developers- Plan Application Security Strategy and align it with business needs- Ensuring compliance with standards, security policies, industry best practices, vulnerabilities and risks, and frameworks.Our specialties include: SAST, DAST, SCA, Container Analysys, Threat modeling, Risk Management, Communication with Developer's team, Education for Developer's team, Code Review, Hiring, onboarding and coaching a team of security engineers and analysts, Vulnerability management, Secure SDLC.Our proposal:- Join your company's team (includes three Application Security Specialists) as one- Relocate with work visa or remote workOur personal profiles:DevSecOps Engineer – https://www.linkedin.com/in/apuzankov/Application Security Analyst – https://www.linkedin.com/in/goluzina-darya/Security Team Lead – https://www.linkedin.com/in/nasonoff/

• Full-Scale Application Security Team

  Sigma Llc.

  Mar 2022 - Present - Moscow, Saint-Petersburg, Russia

  SIGMA is a leader in the development and implementation of IT solutions for the digitalization of the Russian energy and housing sector, with more than 1400 employers.Shared team duties and projects:- Assessment of software development processes: conducted internal security audit of 50 development processes and defined needed security controls (for Application Security Standard and Strategy);- Create and harmonize with business Application Security Posture: developed and implemented Application Security Standard for 50 developer teams with multi technology stack, approved by top management 5 years Application Security Strategy;- Work closely with the Product Management team and different stakeholders to define and influence the Application Security roadmap: created 2 years Application Security Roadmap taking into account business expansion up to 100 development teams;- Maintain, support and extend application security tooling including SAST, DAST, CA, SCA: created Security Pipeline and Application Security Platform with above-mentioned tools;- Automated compliance ensuring of application releases with Application Security Standard for more than 5 production deploys per day;- Produce metrics reporting the state of application security programs and performance of development teams against requirements: developed and provided on a weekly basis Application Security report with 10 key security metrics;- Awareness and education of developers: Awareness and Training program introduced and 50 developer teams successfully passed it ;- Evaluate new security technologies and make recommendations to strengthen the overall security posture.