Application Security Engineer: Vulnerability & Pen Testing

EY; Poland; Hybrid; PLN 150,000 - 210,000; Full time

Job summary

EY GDS Poland seeks an Information Security Analyst - Associate/Senior Associate to join its security team in Poland. Hybrid work with 2 days in the office in Wrocław or Katowice and 3 days remote. You will contribute to protecting EY and client information assets.

Role involves security reviews, vulnerability assessments, and collaboration across teams. Familiarity with Burp, Nmap, Nessus, Wireshark and other tools is valued.

Qualifications

• 1-6 years of experience in application security assessment.
• Hands-on experience in Web, thick client, Mobile Application security reviews.
• Exposure to manual testing methodologies and vulnerability assessment processes.
• Understanding of security controls like firewalls, IDS/IPS, and encryption.

Responsibilities

• Prepare detailed security review reports and remediation guidance.
• Research new application security vulnerabilities and attack vectors.
• Support team in updating skills and knowledge.
• Lead strategic initiatives and mentor new team members.
• Continuously improve to enhance service quality.
• Configure and update vulnerability assessment tools for accuracy.

Skills

Web security testing

Burp Suite

Vulnerability assessment

Programming basics

OWASP Top Ten

Network security

Android & iOS testing

Communication skills

Education

Bachelor's or higher in IT or Cyber Security

Tools

Burp Pro

Nmap

Wireshark

Nessus

WebInspect

Qualys WAS

Checkmarx

WhiteSource

Job description

EY GDS Poland seeks an Information Security Analyst - Associate/Senior Associate to join its security team in Poland. Hybrid work with 2 days in the office in Wrocław or Katowice and 3 days remote. You will contribute to protecting EY and client information assets.

Role involves security reviews, vulnerability assessments, and collaboration across teams. Familiarity with Burp, Nmap, Nessus, Wireshark and other tools is valued.