Application Security & Vulnerability Engineer

Ernst & Young Advisory Services Sdn Bhd; Wrocław; On-site; PLN 150,000 - 210,000; Full time

Job summary

EY GDS Poland is seeking an Vulnerability & Application Security Engineer to join the Information Security team. You will contribute to security reviews, identify vulnerabilities, and help strengthen EY’s security posture across applications and infrastructure.

The role focuses on both manual and automated testing across web, mobile, and network environments, with opportunities to lead strategic initiatives and collaborate with cross-functional teams.

Qualifications

• 1 to 6 years of experience in application security assessment.
• Hands on experience of Web, thick client, Mobile Application security reviews.
• Exposure to various manual testing methodologies.
• Understanding of how vulnerabilities can lead to incidents and how vulnerability assessments aid incident detection.

Responsibilities

• Preparing detailed security review reports and remediation guidance.
• Researching new application security vulnerabilities and attack vectors.
• Support the team in updating their skill and knowledge.
• Leading strategic initiatives and mentoring new team members.
• Continuous improvement to improve quality of service.
• Configure, manage, and update vulnerability assessment tools to ensure they are running optimally.

Skills

Web application security

Mobile application security

Network security testing

Manual testing

Automated testing tools

Programming basics

OWASP Top Ten

Excellent communication

Education

Bachelor's or above in IT or Cyber Security

Tools

Burp Professional

Nmap

Wireshark

Nessus

echomirage

WebInspect

Qualys WAS

Checkmarx

WhiteSource

Job description

EY GDS Poland is seeking an Vulnerability & Application Security Engineer to join the Information Security team. You will contribute to security reviews, identify vulnerabilities, and help strengthen EY’s security posture across applications and infrastructure.

The role focuses on both manual and automated testing across web, mobile, and network environments, with opportunities to lead strategic initiatives and collaborate with cross-functional teams.