Technology, Information and Internet

Semrush

1001-5000

<h2>Job description</h2>
<p>Hi there!<br>We are Semrush, a global IT company developing our own product – a platform for digital marketers.  </p>
<p>And this is our <strong>DevSecOps engineer</strong> role for those who strive to implement functional processes and drive them to full completion.  </p>
<h2>A bit about the team</h2>
<p>You can get to know the team better at one of the interviews, but some brief information about your future colleagues will be useful now.The <strong>Semrush Security Team</strong> comprises__:__</p>
<ul>
<li>Application Security Team</li>
<li>Infrastructure Security Team</li>
<li>Common Flow &amp; Compliance Team</li>
</ul>
<p>As Semrush continues to grow, so does our necessity to simplify and automate workflows to meet the needs of our internal teams, partners, and external users.</p>
<p>The <strong>Semrush Security Team</strong> is a strong team, and the famous security researcher <a href="https://4lemon.ru/2017-01-17_facebook_imagetragick_remote_code_execution.html">Andrey Leonov</a> and other talented guys are with us.</p>
<p>We speak at <a href="http://2019.phdays.com/en/program/reports/you-have-a-kubernetes-cluster-but-no-miner-on-the-pods-we-re-coming-to-you-then/">conferences</a>, hold internal and external events (<a href="https://habr.com/ru/company/semrush/blog/539598/">CTF</a>, meetups), do <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10799">research</a> work, and train employees on how to find vulnerabilities and defend against them.</p>
<p>The group currently consists of three specialists, and we are engaged in the provisioning and development of infrastructure security in the company. Our team has big plans and ambitions. We try to make all decisions jointly. We are missing a colleague who likes to solve complex tasks, who is ready to explore and create new things, who is not afraid to look at the backlog sometimes.</p>
<h2>We have several projects underway</h2>
<ul>
<li>Work with the team to develop security practices in GCP and k8s (focus on Policy as Code).</li>
<li>Participate in architecture reviews and audits of new services in terms of infrastructure security.</li>
<li>Integrate security controls with CI/CD.</li>
<li>Develop and help dev teams implement secure secret storage practices (Vault/GCP secret manager).</li>
<li>Participate in the development of an existing SIEM security incident detection and response system based on Splunk ES.</li>
</ul>
<p>We also have many plans that have yet to be discussed and implemented. There is an opportunity to offer your vision of how we can improve infrastructure security and what opportunities there are for automation.</p>
<p>What challenges you will have to face?  </p>
<p>We have a very flexible approach, and we always try to find a compromise between the necessary tasks and the interesting ones. We try to set aside a little more time to be able to work through the task well, document everything important, and, if necessary, conduct research.</p>
<p>There are no clear frameworks in the group, all initiatives/improvements/development of systems are discussed, and a roadmap with success criteria is formed. We try not to limit ourselves in the scopes of decisions we choose, we like reasoned arguments, and we always help each other :).</p>
<h2>Tasks in the role</h2>
<ul>
<li>Duty (we have several systems that send us alerts), we can’t do without it yet, but we try very hard to minimize the time required for duty through an adequate approach, automation, and good runbooks.</li>
<li>Tasks related to PCI DSS compliance (we have been audited for several years, but there is always a routine + desire to make things even better).</li>
<li>Creation of correlation rules in SIEM, alerts for the rule and response runbooks.</li>
<li>Analyzing and creating security policy for k8s.</li>
<li>Forming requirements and auditing GCP infrastructure for new services.</li>
<li>Integrating new analysis tools into CI/CD.</li>
</ul>
<h2>Requirements</h2>
<h2>Who we are looking for</h2>
<p>We think that this experience and competences will help our future colleague to join the team.</p>
<ul>
<li>Linux administration experience.</li>
<li>Good knowledge of networks.</li>
<li>Automation/programming skills (Bash, Python/Go/PHP).</li>
<li>Understanding of the basics of safety.</li>
<li>Understanding of CI/CD.</li>
</ul>
<h2>They say there are no perfect candidates, but that might well be you, if</h2>
<ul>
<li>Knowledge of GCP.</li>
<li>Ability to work with docker/k8s.</li>
<li>Understanding of DevOps/DevSecOps practices.</li>
<li>The ability to build communication with colleagues from dev teams.</li>
<li>Infrastructure auditing/pentesting skills.</li>
</ul>
<h2>We will try to create all the right conditions for you to work and rest comfortably</h2>
<ul>
<li>License for Burp Pro, Metasploit Pro and other hacking tools, as well as help from friendly colleagues.</li>
<li>Access to online platforms HTB</li>
<li>Flexible working day start.</li>
<li>Psychologist consultations.</li>
<li>Breakfast, snacks, and coffee at the office.</li>
<li>Corporate events.</li>
<li>Multi-sport card and compensation for hobby expense (Employee+Family).</li>
<li>Training, courses, conferences.</li>
<li>English and other courses.</li>
<li>Gifts for employees.</li>
<li>Employee Stock Purchase Program.</li>
</ul>
<h2>Finally, a little more about our company</h2>
<p>Semrush is a leading online visibility management SaaS platform that enables businesses globally to run search engine optimization, pay-per-click, content, social media and competitive research campaigns and get measurable results from online marketing. </p>
<p>We've been developing our product for 13 years and have been awarded G2's Top 100 Software Products, Global and US Search Awards 2021, Great Place to Work Certification, Deloitte Technology Fast 500 and many more. In March 2021 Semrush went public and started trading on the NYSE with the SEMR ticker.</p>
<p>10,000,000+ users in America, Europe, Asia, and Australia have already tried Semrush, and over 1,000 people around the world are working on its development. The Semrush team is constantly growing.</p>
<p>Our new colleague, we are waiting for you! </p>
<p><em>Semrush is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based upon race, religion, creed, color, national origin, sex, pregnancy, sexual orientation, gender identity, gender expression, age, ancestry, physical or mental disability, or medical condition including medical characteristics, genetic identity, marital status, military service, or any other classification protected by applicable local, state or federal laws. All employment decisions are based on business needs, job requirements, merit, and individual qualifications.</em></p>

<h2>Job description</h2>
<p>Hi there!<br />We are Semrush, a global IT company developing our own product – a platform for digital marketers.  </p>
<p>And this is our <strong>DevSecOps engineer</strong> role for those who strive to implement functional processes and drive them to full completion.  </p>
<h2>A bit about the team</h2>
<p>You can get to know the team better at one of the interviews, but some brief information about your future colleagues will be useful now.The <strong>Semrush Security Team</strong> comprises__:__</p>
<ul>
<li>Application Security Team</li>
<li>Infrastructure Security Team</li>
<li>Common Flow &amp; Compliance Team</li>
</ul>
<p>As Semrush continues to grow, so does our necessity to simplify and automate workflows to meet the needs of our internal teams, partners, and external users.</p>
<p>The <strong>Semrush Security Team</strong> is a strong team, and the famous security researcher <a href="https://4lemon.ru/2017-01-17_facebook_imagetragick_remote_code_execution.html" rel="noopener nofollow" target="_blank">Andrey Leonov</a> and other talented guys are with us.</p>
<p>We speak at <a href="http://2019.phdays.com/en/program/reports/you-have-a-kubernetes-cluster-but-no-miner-on-the-pods-we-re-coming-to-you-then/" rel="noopener nofollow" target="_blank">conferences</a>, hold internal and external events (<a href="https://habr.com/ru/company/semrush/blog/539598/" rel="noopener nofollow" target="_blank">CTF</a>, meetups), do <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10799" rel="noopener nofollow" target="_blank">research</a> work, and train employees on how to find vulnerabilities and defend against them.</p>
<p>The group currently consists of three specialists, and we are engaged in the provisioning and development of infrastructure security in the company. Our team has big plans and ambitions. We try to make all decisions jointly. We are missing a colleague who likes to solve complex tasks, who is ready to explore and create new things, who is not afraid to look at the backlog sometimes.</p>
<h2>We have several projects underway</h2>
<ul>
<li>Work with the team to develop security practices in GCP and k8s (focus on Policy as Code).</li>
<li>Participate in architecture reviews and audits of new services in terms of infrastructure security.</li>
<li>Integrate security controls with CI/CD.</li>
<li>Develop and help dev teams implement secure secret storage practices (Vault/GCP secret manager).</li>
<li>Participate in the development of an existing SIEM security incident detection and response system based on Splunk ES.</li>
</ul>
<p>We also have many plans that have yet to be discussed and implemented. There is an opportunity to offer your vision of how we can improve infrastructure security and what opportunities there are for automation.</p>
<p>What challenges you will have to face?  </p>
<p>We have a very flexible approach, and we always try to find a compromise between the necessary tasks and the interesting ones. We try to set aside a little more time to be able to work through the task well, document everything important, and, if necessary, conduct research.</p>
<p>There are no clear frameworks in the group, all initiatives/improvements/development of systems are discussed, and a roadmap with success criteria is formed. We try not to limit ourselves in the scopes of decisions we choose, we like reasoned arguments, and we always help each other :).</p>
<h2>Tasks in the role</h2>
<ul>
<li>Duty (we have several systems that send us alerts), we can’t do without it yet, but we try very hard to minimize the time required for duty through an adequate approach, automation, and good runbooks.</li>
<li>Tasks related to PCI DSS compliance (we have been audited for several years, but there is always a routine + desire to make things even better).</li>
<li>Creation of correlation rules in SIEM, alerts for the rule and response runbooks.</li>
<li>Analyzing and creating security policy for k8s.</li>
<li>Forming requirements and auditing GCP infrastructure for new services.</li>
<li>Integrating new analysis tools into CI/CD.</li>
</ul>
<h2>Requirements</h2>
<h2>Who we are looking for</h2>
<p>We think that this experience and competences will help our future colleague to join the team.</p>
<ul>
<li>Linux administration experience.</li>
<li>Good knowledge of networks.</li>
<li>Automation/programming skills (Bash, Python/Go/PHP).</li>
<li>Understanding of the basics of safety.</li>
<li>Understanding of CI/CD.</li>
</ul>
<h2>They say there are no perfect candidates, but that might well be you, if</h2>
<ul>
<li>Knowledge of GCP.</li>
<li>Ability to work with docker/k8s.</li>
<li>Understanding of DevOps/DevSecOps practices.</li>
<li>The ability to build communication with colleagues from dev teams.</li>
<li>Infrastructure auditing/pentesting skills.</li>
</ul>
<h2>We will try to create all the right conditions for you to work and rest comfortably</h2>
<ul>
<li>License for Burp Pro, Metasploit Pro and other hacking tools, as well as help from friendly colleagues.</li>
<li>Access to online platforms HTB</li>
<li>Flexible working day start.</li>
<li>Psychologist consultations.</li>
<li>Breakfast, snacks, and coffee at the office.</li>
<li>Corporate events.</li>
<li>Multi-sport card and compensation for hobby expense (Employee+Family).</li>
<li>Training, courses, conferences.</li>
<li>English and other courses.</li>
<li>Gifts for employees.</li>
<li>Employee Stock Purchase Program.</li>
</ul>
<h2>Finally, a little more about our company</h2>
<p>Semrush is a leading online visibility management SaaS platform that enables businesses globally to run search engine optimization, pay-per-click, content, social media and competitive research campaigns and get measurable results from online marketing. </p>
<p>We've been developing our product for 13 years and have been awarded G2's Top 100 Software Products, Global and US Search Awards 2021, Great Place to Work Certification, Deloitte Technology Fast 500 and many more. In March 2021 Semrush went public and started trading on the NYSE with the SEMR ticker.</p>
<p>10,000,000+ users in America, Europe, Asia, and Australia have already tried Semrush, and over 1,000 people around the world are working on its development. The Semrush team is constantly growing.</p>
<p>Our new colleague, we are waiting for you! </p>
<p><em>Semrush is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based upon race, religion, creed, color, national origin, sex, pregnancy, sexual orientation, gender identity, gender expression, age, ancestry, physical or mental disability, or medical condition including medical characteristics, genetic identity, marital status, military service, or any other classification protected by applicable local, state or federal laws. All employment decisions are based on business needs, job requirements, merit, and individual qualifications.</em></p>

<h2>Job description</h2>
<p>Hi there!<br>We are Semrush, a global IT company developing our own product – a platform for digital marketers.  </p>
<p>And this is our <strong>DevSecOps engineer</strong> role for those who strive to implement functional processes and drive them to full completion.  </p>
<h2>A bit about the team</h2>
<p>You can get to know the team better at one of the interviews, but some brief information about your future colleagues will be useful now.The <strong>Semrush Security Team</strong> comprises__:__</p>
<ul>
<li>Application Security Team</li>
<li>Infrastructure Security Team</li>
<li>Common Flow &amp; Compliance Team</li>
</ul>
<p>As Semrush continues to grow, so does our necessity to simplify and automate workflows to meet the needs of our internal teams, partners, and external users.</p>
<p>The <strong>Semrush Security Team</strong> is a strong team, and the famous security researcher <a target="_blank" rel="noopener nofollow" href="https://4lemon.ru/2017-01-17_facebook_imagetragick_remote_code_execution.html">Andrey Leonov</a> and other talented guys are with us.</p>
<p>We speak at <a target="_blank" rel="noopener nofollow" href="http://2019.phdays.com/en/program/reports/you-have-a-kubernetes-cluster-but-no-miner-on-the-pods-we-re-coming-to-you-then/">conferences</a>, hold internal and external events (<a target="_blank" rel="noopener nofollow" href="https://habr.com/ru/company/semrush/blog/539598/">CTF</a>, meetups), do <a target="_blank" rel="noopener nofollow" href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10799">research</a> work, and train employees on how to find vulnerabilities and defend against them.</p>
<p>The group currently consists of three specialists, and we are engaged in the provisioning and development of infrastructure security in the company. Our team has big plans and ambitions. We try to make all decisions jointly. We are missing a colleague who likes to solve complex tasks, who is ready to explore and create new things, who is not afraid to look at the backlog sometimes.</p>
<h2>We have several projects underway</h2>
<ul>
<li>Work with the team to develop security practices in GCP and k8s (focus on Policy as Code).</li>
<li>Participate in architecture reviews and audits of new services in terms of infrastructure security.</li>
<li>Integrate security controls with CI/CD.</li>
<li>Develop and help dev teams implement secure secret storage practices (Vault/GCP secret manager).</li>
<li>Participate in the development of an existing SIEM security incident detection and response system based on Splunk ES.</li>
</ul>
<p>We also have many plans that have yet to be discussed and implemented. There is an opportunity to offer your vision of how we can improve infrastructure security and what opportunities there are for automation.</p>
<p>What challenges you will have to face?  </p>
<p>We have a very flexible approach, and we always try to find a compromise between the necessary tasks and the interesting ones. We try to set aside a little more time to be able to work through the task well, document everything important, and, if necessary, conduct research.</p>
<p>There are no clear frameworks in the group, all initiatives/improvements/development of systems are discussed, and a roadmap with success criteria is formed. We try not to limit ourselves in the scopes of decisions we choose, we like reasoned arguments, and we always help each other :).</p>
<h2>Tasks in the role</h2>
<ul>
<li>Duty (we have several systems that send us alerts), we can’t do without it yet, but we try very hard to minimize the time required for duty through an adequate approach, automation, and good runbooks.</li>
<li>Tasks related to PCI DSS compliance (we have been audited for several years, but there is always a routine + desire to make things even better).</li>
<li>Creation of correlation rules in SIEM, alerts for the rule and response runbooks.</li>
<li>Analyzing and creating security policy for k8s.</li>
<li>Forming requirements and auditing GCP infrastructure for new services.</li>
<li>Integrating new analysis tools into CI/CD.</li>
</ul>
<h2>Requirements</h2>
<h2>Who we are looking for</h2>
<p>We think that this experience and competences will help our future colleague to join the team.</p>
<ul>
<li>Linux administration experience.</li>
<li>Good knowledge of networks.</li>
<li>Automation/programming skills (Bash, Python/Go/PHP).</li>
<li>Understanding of the basics of safety.</li>
<li>Understanding of CI/CD.</li>
</ul>
<h2>They say there are no perfect candidates, but that might well be you, if</h2>
<ul>
<li>Knowledge of GCP.</li>
<li>Ability to work with docker/k8s.</li>
<li>Understanding of DevOps/DevSecOps practices.</li>
<li>The ability to build communication with colleagues from dev teams.</li>
<li>Infrastructure auditing/pentesting skills.</li>
</ul>
<h2>We will try to create all the right conditions for you to work and rest comfortably</h2>
<ul>
<li>License for Burp Pro, Metasploit Pro and other hacking tools, as well as help from friendly colleagues.</li>
<li>Access to online platforms HTB</li>
<li>Flexible working day start.</li>
<li>Psychologist consultations.</li>
<li>Breakfast, snacks, and coffee at the office.</li>
<li>Corporate events.</li>
<li>Multi-sport card and compensation for hobby expense (Employee+Family).</li>
<li>Training, courses, conferences.</li>
<li>English and other courses.</li>
<li>Gifts for employees.</li>
<li>Employee Stock Purchase Program.</li>
</ul>
<h2>Finally, a little more about our company</h2>
<p>Semrush is a leading online visibility management SaaS platform that enables businesses globally to run search engine optimization, pay-per-click, content, social media and competitive research campaigns and get measurable results from online marketing. </p>
<p>We've been developing our product for 13 years and have been awarded G2's Top 100 Software Products, Global and US Search Awards 2021, Great Place to Work Certification, Deloitte Technology Fast 500 and many more. In March 2021 Semrush went public and started trading on the NYSE with the SEMR ticker.</p>
<p>10,000,000+ users in America, Europe, Asia, and Australia have already tried Semrush, and over 1,000 people around the world are working on its development. The Semrush team is constantly growing.</p>
<p>Our new colleague, we are waiting for you! </p>
<p><em>Semrush is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based upon race, religion, creed, color, national origin, sex, pregnancy, sexual orientation, gender identity, gender expression, age, ancestry, physical or mental disability, or medical condition including medical characteristics, genetic identity, marital status, military service, or any other classification protected by applicable local, state or federal laws. All employment decisions are based on business needs, job requirements, merit, and individual qualifications.</em></p>

DevSecOps Engineer (Security Team)

Semrush logo

Google {privacyLink} and {termsLink} apply.

Benefits

Media

We don't have any open positions at the moment

No available jobs

Locations

Open positions

Values

Videos

Do you have a question?

Spontaneous application

We’ll send a link to this job to your email.

Apply later

We are reviewing your account. Once our managers approve it, candidates will be able to apply for this job.

Changes are not visible until you publish your job.

This is a preview of your job ad.

Interested?

The job {jobTitle} was archived or the deadline has passed.

This job is no longer available

Hiring team

{count, plural, one {# day a week on-site} other {# days a week on-site}}

Our other open positions

We no longer accept spontaneous applications

Interested in working at {companyName}? Tell us about your skills and experience.

We may not have a suitable job available now, but your skills and experience could match a future role.

Use the application form to upload your CV and cover letter. Mention the position you’re interested in in your cover letter.

The company may contact you if a suitable opportunity arises.

How to apply

Jobs at {companyName}. Browse all open positions and become part of our team! Open positions: {jobsCount}

Jobs at {companyName}. Browse our {jobsCount} available jobs and apply today.

Browse our {jobsCount} available jobs and apply today.

Interested in working at {companyName}? Send a spontaneous application to tell us about your skills and experience.