APPLICATION SECURITY BUSINESS PARTNER (APPLICATION SECURITY TEAM)

Job Description
Hi there!
We are Semrush, a global IT company developing our own product – a platform for digital marketers. New stars are born here, so don’t miss your chance.
This is our
Application Security Business Partner role for those who strive to implement functional processes and drive them to full completion.
Tasks in the role

Act as the primary point of contact between the application security team and the development teams, building strong partnerships with key stakeholders to promote security first
Collaborate closely with development teams to embed security practices into their workflows and the Software Development Life Cycle (SDLC)
Influence and guide engineering teams to adopt secure coding standards and practices, ensuring security is a foundational aspect of all development projects
Deliver training programs to enhance security awareness and knowledge across development teams
Review and suggest enhancements to existing development processes to increase security and operational efficiency
Establish and track security metrics to measure the effectiveness of security initiatives within the development lifecycle

Requirements
Who we are looking for

Excellent written and verbal communication skills, capable of articulating complex security concepts in a clear and actionable manner
Familiarity with modern web application development methodologies and workflows
Solid knowledge of core application security principles and best practices
Experience partnering with cross-functional teams to drive security initiatives and integrate security into existing processes

Not required, but a plus

Background in project or program management within a technology or security setting
Experience in developing and delivering security training and awareness programs
Familiarity with security compliance standards and regulatory requirements relevant to application security
Deep understanding of modern web technologies and architectures, with the ability to discuss technical concepts with development teams
You share our common values: Trust, as we prefer to speak up and be our true selves; Sense of Ownership, as it’s not worth wasting time on something you don’t believe in; and enthusiasm for Constant Change, as we are always looking to make things better

A bit about the team
You can get to know the team better at one of the interviews, but some brief information about future colleagues will be useful now.
We are an actively growing security team using modern security approaches and tools. We are proud of the high level of responsibility and results of our work. It motivates us to grow and contribute more to the company's success!
Semrush Security Department contains:

Application Security Team
Infrastructure Security Team
Common Flow & Compliance Team

As Semrush continues to grow, so does our demand for simplifying and automating workflows to meet the needs of our internal teams, partners, and external users.
The Semrush Security Department is a strong team. The famous security researcher and other talented guys are with us.
We speak at , hold internal and external events (, meetups), do work, and train employees on how to find vulnerabilities and defend against them.
The Application Security Team is working on complex and multi-layer software products. As a member of AppSec, you will also be able to participate in building secure software development processes. We are not limited to basic workflows such as DAST and SAST; we focus our efforts on scalable investments in our engineering ecosystem to identify and drive high-impact security initiatives.
We are hiring for a security partner role to support product development at Semrush. In this role, you will work closely with engineering teams, building edge services, platform features, and backend infrastructure.
We are looking for security engineers who can be the voice of security in the defensive initiatives and identify the right security investments to help us build strong security processes.
We will try to create all the right conditions for you to work and rest comfortably

This offer stands for the “hybrid” work format: some days, you work from the office, and some #wfh.
Flexible working day start
Unlimited PTO
Hobby benefit
Breakfast, snacks, and coffee at the office
Corporate events
Training, courses, conferences
Gifts for employees

Finally, a little more about our company
Semrush is a leading online visibility management SaaS platform that enables businesses globally to run search engine optimization, pay-per-click, content, social media and competitive research campaigns and get measurable results from online marketing.
We’ve been developing our product for 16 years and have been awarded G2s Top 100 Software Products, Global and US Search Awards 2021, Great Place to Work Certification, Deloitte Technology Fast 500 and many more. In March 2021 Semrush went public and started trading on the NYSE with the SEMR ticker.
10,000,000+ users in America, Europe, Asia, and Australia have already tried Semrush, and over 1,000 people around the world are working on its development. The Semrush team is constantly growing.
Our new colleague, we are waiting for you!
Semrush is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based upon race, religion, creed, color, national origin, sex, pregnancy, sexual orientation, gender identity, gender expression, age, ancestry, physical or mental disability, or medical condition including medical characteristics, genetic identity, marital status, military service, or any other classification protected by applicable local, state or federal laws. All employment decisions are based on business needs, job requirements, merit, and individual qualifications.