Application Security Specialist

IT CONNECT Sp. z o.o. Sp. k.; Wrocław; Hybrid; PLN 140,000 - 210,000; Full time

Benefits offered by this job

Office in Wroclaw

Job summary

IT CONNECT Sp. z o.o. Sp. k. poszukuje specjalisty ds. AppSec, który będzie wspierać zespoły projektowe w zabezpieczaniu oprogramowania na całym cyklu życia.

Do obowiązków należy przeprowadzanie ocen bezpieczeństwa, integracja narzędzi SAST/DAST/SCA w pipelines, udział w modelowaniu zagrożeń oraz podnoszenie świadomości bezpieczeństwa wśród deweloperów.

Qualifications

• Bachelor’s or Master’s degree in CS/InfoSec or equivalent practical experience.
• 4–5 years of relevant experience in AppSec, software security or secure software development.
• Hands-on experience with security assessments and vulnerability analysis.
• Experience collaborating with software teams to fix security issues.
• Coding or scripting in Python, Java or .NET.
• Knowledge of OWASP Top 10 and OWASP ASVS.
• Experience with CI/CD and secure deployment.
• Cloud-native security, containers or Kubernetes familiarity.
• DevSecOps practices, version control like Git, Jenkins.
• Threat modelling and security design reviews.

Responsibilities

• Support dev teams in integrating security into SDLC and secure coding.
• Perform security assessments using AppSec tools; analyze findings and guide remediation.
• Work with SAST/DAST/SCA tools within CI/CD pipelines.
• Contribute to threat modelling and security design reviews.
• Improve AppSec tooling and processes.
• Create security awareness materials for developers.
• Ensure compliance with internal security standards.
• Communicate findings and risks to diverse audiences.

Skills

Security mindset

Analytical thinking

Communication

Threat modelling

DevSecOps practices

Vulnerability management

Problem-solving

Collaboration

Education

BSc/BSc in CS/InfoSec

Equivalent practical experience

Tools

Semgrep

SonarQube

HCL AppScan

OWASP ZAP

Black Duck

Sonatype Lifecycle

Job description

Nasze wymagania:

• Bachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity or a related field, or equivalent practical experience.
• 4–5 years of relevant experience in application security, software security, secure software development or a closely related technical field.
• Hands‑on experience with application security assessments, vulnerability analysis or security testing.
• Experience working with software development teams to identify and address security issues.
• Experience writing code and developing digital products; intermediate programming or scripting skills in Python, Java or .NET.
• Experience with AppSec tools such as Semgrep, SonarQube, HCL AppScan, ZAP, Black Duck or Sonatype Lifecycle (or comparable).
• Good understanding of common application vulnerabilities and security standards: OWASP Top 10, OWASP ASVS and other relevant OWASP standards.
• Familiarity with SAST, DAST and SCA and their integration into CI/CD pipelines.
• Experience with cloud‑native application security, containers or Kubernetes.
• Familiarity with DevSecOps practices, version control and CI/CD pipelines, preferably Jenkins, Git, Docker or Kubernetes.
• Understanding of vulnerability management, risk assessment and remediation processes.
• Soft skills: strong analytical and problem‑solving skills, attention to detail, clear written and verbal communication (including explaining technical findings to different audiences), collaborative approach, proactive mindset and ownership, willingness to learn and share knowledge.
• Experience with threat modelling and security design reviews.
• Familiarity with NIST, OWASP DSOMM and OWASP SAMM.
• Relevant application security or cybersecurity certifications.
• Awareness of emerging regulations such as the EU Cyber Resilience Act (CRA).

O projekcie:

Join the AppSec Platform & Security Engineering team in a global industrial organization. You will help development teams build secure software by identifying, assessing and mitigating security risks throughout the entire software development lifecycle.

Zakres obowiązków:

• Support development teams in integrating security into the software development lifecycle and applying secure coding practices.
• Perform and support security assessments using application security tools, analyze findings, prioritize risks and guide teams in remediating vulnerabilities.
• Work with SAST, DAST and SCA tools and other security testing technologies to identify potential risks in applications.
• Contribute to threat modelling, security design reviews and the application of established security patterns.
• Support the integration and improvement of AppSec tools and processes within CI/CD pipelines and development workflows.
• Contribute to security awareness activities, training materials and guidance for development teams.
• Help teams implement relevant security requirements, standards and internal policies.
• Identify opportunities to improve AppSec processes, tooling and ways of working.
• Communicate security findings, explain risks and support practical remediation together with developers, architects and security colleagues.

Oferujemy:

2 days at the office in Wroclaw required