QA Security Engineer
Обеспечение безопасности приложений через тестирование уязвимостей и интеграцию security-проверок в QA-процессы
Уровень:
Основы программирования
7 навыков · 35 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Алгоритмы и структуры данных | |||||
| Алгоритмы и сложность | Awareness | Working | Advanced | Expert | Expert |
| Структуры данных | Awareness | Working | Advanced | Expert | Expert |
| ООП и паттерны проектирования | |||||
| Принципы ООП и SOLID | Awareness | Working | Advanced | Expert | Expert |
| Паттерны проектирования | Awareness | Working | Advanced | Expert | Expert |
| Многопоточность и конкурентность | |||||
| Многопоточное программирование | Awareness | Working | Advanced | Expert | Expert |
| Асинхронное программирование | Awareness | Working | Advanced | Expert | Expert |
| Чистый код и рефакторинг | |||||
| Качество кода и рефакторинг | Awareness | Working | Advanced | Expert | Expert |
Backend Development
1 навыков · 5 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Кэширование | |||||
| Redis | Awareness | Working | Advanced | Expert | Expert |
Базы данных
1 навыков · 5 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Реляционные БД | |||||
| PostgreSQL | Awareness | Working | Advanced | Expert | Expert |
API и интеграции
4 навыков · 20 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| REST API | |||||
| REST API Design | Awareness | Working | Advanced | Expert | Expert |
| GraphQL | |||||
| GraphQL Design | Awareness | Working | Advanced | Expert | Expert |
| Управление API | |||||
| Документирование API | Awareness | Working | Advanced | Expert | Expert |
| Тестирование API | Awareness | Working | Advanced | Expert | Expert |
Облако и инфраструктура
5 навыков · 25 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Контейнеризация | |||||
| Docker | Awareness | Working | Advanced | Expert | Expert |
| Безопасность контейнеров | |||||
| Сканирование безопасности контейнеров | Awareness | Working | Advanced | Expert | Expert |
| Kubernetes и оркестрация | |||||
| Kubernetes Core | Awareness | Working | Advanced | Expert | Expert |
| Облачные провайдеры | |||||
| AWS | Awareness | Working | Advanced | Expert | Expert |
| Сети | |||||
| Основы сетей | Awareness | Working | Advanced | Expert | Expert |
DevOps и CI/CD
1 навыков · 5 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| CI/CD | |||||
| GitHub Actions / GitLab CI | Awareness | Working | Advanced | Expert | Expert |
Тестирование и QA
10 навыков · 50 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Стратегия тестирования | |||||
| Тестовая пирамида и стратегия | Awareness | Working | Advanced | Expert | Expert |
| TDD и BDD | Awareness | Working | Advanced | Expert | Expert |
| Property-Based Testing | Awareness | Working | Advanced | Expert | Expert |
| Unit-тестирование | |||||
| Unit-тестирование | Awareness | Working | Advanced | Expert | Expert |
| Интеграционное тестирование | |||||
| Интеграционное тестирование | Awareness | Working | Advanced | Expert | Expert |
| E2E-тестирование | |||||
| E2E тестирование | Awareness | Working | Advanced | Expert | Expert |
| Нагрузочное тестирование | |||||
| Нагрузочное тестирование | Awareness | Working | Advanced | Expert | Expert |
| Специализированное тестирование | |||||
| Security Testing | Awareness | Working | Advanced | Expert | Expert |
| Тестовая инфраструктура | |||||
| Управление тестовыми данными | Awareness | Working | Advanced | Expert | Expert |
| Управление тестовыми окружениями | Awareness | Working | Advanced | Expert | Expert |
Безопасность
14 навыков · 70 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Безопасность приложений | |||||
| OWASP и безопасность приложений | Awareness | Working | Advanced | Expert | Expert |
| SAST/DAST | Awareness | Working | Advanced | Expert | Expert |
| Практики безопасного кода | Awareness | Working | Advanced | Expert | Expert |
| Моделирование угроз | Awareness | Working | Advanced | Expert | Expert |
| Сканирование зависимостей | Awareness | Working | Advanced | Expert | Expert |
| Безопасность инфраструктуры | |||||
| Сетевая безопасность | Awareness | Working | Advanced | Expert | Expert |
| Безопасность облачной инфраструктуры | Awareness | Working | Advanced | Expert | Expert |
| Безопасность Kubernetes | Awareness | Working | Advanced | Expert | Expert |
| Аутентификация и авторизация | |||||
| JWT / OAuth2 / OIDC | Awareness | Working | Advanced | Expert | Expert |
| RBAC / ABAC авторизация | Awareness | Working | Advanced | Expert | Expert |
| Комплаенс и соответствие | |||||
| GDPR / 152-ФЗ Compliance | Awareness | Working | Advanced | Expert | Expert |
| PCI DSS | Awareness | Working | Advanced | Expert | Expert |
| Реагирование на инциденты | |||||
| Процесс реагирования на инциденты | Awareness | Working | Advanced | Expert | Expert |
| Управление уязвимостями | Awareness | Working | Advanced | Expert | Expert |
AI-ассистированная разработка
4 навыков · 20 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| AI-ассистенты кодирования | |||||
| GitHub Copilot | Awareness | Working | Advanced | Expert | Expert |
| Cursor IDE | Awareness | Working | Advanced | Expert | Expert |
| ChatGPT / Claude | Awareness | Working | Advanced | Expert | Expert |
| Prompt Engineering | |||||
| Prompt Engineering для кода | Awareness | Working | Advanced | Expert | Expert |
Архитектура и проектирование
1 навыков · 5 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| System Design | |||||
| Основы System Design | Awareness | Working | Advanced | Expert | Expert |
Observability и мониторинг
4 навыков · 20 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Логирование | |||||
| Структурированное логирование | Awareness | Working | Advanced | Expert | Expert |
| ELK Stack | Awareness | Working | Advanced | Expert | Expert |
| Метрики и мониторинг | |||||
| Prometheus и Grafana | Awareness | Working | Advanced | Expert | Expert |
| Distributed Tracing | |||||
| OpenTelemetry | Awareness | Working | Advanced | Expert | Expert |
Контроль версий и коллаборация
3 навыков · 15 требований| Навык | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Git и workflow | |||||
| Git Advanced | Awareness | Working | Advanced | Expert | Expert |
| Code Review | |||||
| Code Review | Awareness | Working | Advanced | Expert | Expert |
| Инструменты совместной работы | |||||
| Документация как код | Awareness | Working | Advanced | Expert | Expert |