Application/Product Security Engineer

ABB; Polska; Hybrid; PLN 80,000 - 100,000; Full time

Job summary

A global technology leader is seeking an Application/Product Security Engineer to work in a hybrid model. The successful candidate will be responsible for conducting security assessments, designing secure architectures, reviewing code for vulnerabilities, and educating development teams on secure coding practices. A solid understanding of programming languages, security tools, and principles is required, along with a degree in Computer Science. Fluency in English is essential and relevant certifications are a plus.

Qualifications

• Degree in Computer Science or related field.
• Understanding of programming languages like Java, C#, Python.
• Experience with application security tools and practices.

Responsibilities

• Conduct security assessments and threat modeling.
• Design and implement security architecture for products.
• Review code for security vulnerabilities.
• Educate development teams on secure coding practices.
• Evaluate and implement application security tools.
• Assist in incident response for security breaches.
• Collaborate with cross-functional teams on security integration.
• Monitor and report on application security metrics.

Skills

Understanding of programming languages (Java, C#, Python, JavaScript)

Strong application security principles

Security tools and processes (SAST, DAST, SCA)

Containerization and orchestration tools (Docker, Kubernetes)

Fluency in English

Education

University degree in Computer Science or similar field

Tools

Security tools (e.g., SonarQube, OWASP ZAP, Nessus)

Job description

At ABB, we help industries outrun - leaner and cleaner. Here, progress is an expectation - for you, your team, and the world. As a global market leader, we'll give you what you need to make it happen. It won't always be easy, growing takes grit. But at ABB, you'll never run alone. Run what runs the world.

This Position reports to:

Software Product Development Team Leader

We are an international pioneering technology leader that is writing the future of industrial digitalization. At the forefront is our Corporate Technology Center which provides industry leading software and deep domain expertise to help the world's most asset-intensive industries solve their biggest challenges.

To strengthen our team in IIoT Platform and Applications stream, we are looking for a Application/Product Security Engineer, who is an effective team player with excellent communication skills. As an IIoT P&A stream we are developing unified approach for software which consists of set of services and apps with individual lifecycles hosted on top of ABB common platforms for on-prem execution and cloud. Seize this unique opportunity and see your work transformed into a hive of tangible products.

As an Application/Product Security Engineer you will be working with cross-functional and agile teams which operates in an international environment.

The work model for the role is: hybrid #LI-hybrid

You will be mainly accountable for:

• Security Assessments: Conduct regular security assessments, including threat modeling, At-tack Surface Analysis, Critical Analysis.
• Security Architecture: Design and implement security architecture and controls for new and existing products.
• Code Review: Review source code for security vulnerabilities and provide actionable feedback to development teams.
• Secure Coding Practices: Educate and advocate for secure coding practices among development teams through workshops, training sessions, and documentation.
• Tool Implementation: Evaluate and implement application security tools (e.g., static and dynamic analysis tools) to automate security testing processes.
• Incident Response: Assist in incident response activities related to application security breaches, including root cause analysis and remediation strategies.
• Collaboration: Work closely with cross-functional teams, including software developers, DevOps, and IT security, to ensure security considerations are integrated into the development process.
• Monitoring and Reporting: Monitor application security metrics and provide regular reports to management on security posture and compliance.

Qualifications for the role:

• University degree in Computer Science or similar field
• Understanding of programming languages such as Java, C#, Python, or JavaScript.
• Strong understanding of application security principles and secure coding practices.
• Strong understanding of application security principles like network security, encryption, access management and their best practices
• Experience with security tools and processes such as SAST, DAST, SCA, and vulnerability scanners (e.g., SonarQube, OWASP ZAP, Nessus, Invicti)
• Knowledge of security frameworks (e.g., OWASP Top Ten, NIST, ISO 27001), cloud platforms (e.g., AWS, Azure, Google Cloud) and their security features
• Hands on experience with containerization and orchestration tools such as Docker and Kubernetes
• Fluency in English
• Certifications: Relevant certifications such as Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), or Offensive Security Certified Professional (OSCP) are a plus

We value people from different backgrounds. Could this be your story? Apply today or visit www.abb.com to read more about us and learn about the impact of our solutions across the globe.