Application Security & Vulnerability Engineer

EY GDS; Wrocław; On-site; PLN 180,000 - 240,000; Full time

Job summary

EY Global Delivery Services (GDS) in Poland collaborates across nine locations worldwide, delivering security assurance on EY’s deployed technologies and leading third‑party attestation efforts. An Information Security Analyst will work with team leads to support security reviews across web, mobile, and cloud environments, ensuring compliance and robust risk controls.

The role emphasizes hands-on testing, vulnerability management, and continuous learning within a dynamic, global team.

Qualifications

• Hands-on experience of Web, thick client, Mobile, VOIP, and Wireless security testing.
• Proficient in automated and manual application testing methodologies.
• Expert in Burp Pro, Nmap, Wireshark, Nessus, echomirage.
• Expert in automated scanning tools WebInspect / Qualys WAS, CheckMarx, WhiteSource.
• Knowledge of programming languages like C/C++, C#, Java, ASP.NET; scripting (Perl/Python).
• Understanding of secure coding principles and OWASP Top Ten.
• Knowledge of security requirements in ASP.NET & Java applications.
• Good TCP/IP and Network Security knowledge.
• Experience testing AI-integrated projects.
• Capable of testing both Android & iOS apps.

Responsibilities

• Preparing detailed security review reports and remediation guidance.
• Researching new application security vulnerabilities and attack vectors.
• Support the team in updating their skill and knowledge.
• Leading strategic initiatives and mentoring new team members.
• Continuous improvement to improve quality of service.
• Configure, manage, and update vulnerability assessment tools to ensure they are running optimally.

Skills

Web security testing

Thick client testing

Mobile testing

VOIP testing

Wireless testing

Automated testing

Manual testing

Education

Bachelor's degree in IT or Cyber Security

Tools

Burp Suite

Nmap

Wireshark

Nessus

Echo Mirage

WebInspect

Qualys WAS

Checkmarx

WhiteSource

Job description

EY Global Delivery Services (GDS) in Poland collaborates across nine locations worldwide, delivering security assurance on EY’s deployed technologies and leading third‑party attestation efforts. An Information Security Analyst will work with team leads to support security reviews across web, mobile, and cloud environments, ensuring compliance and robust risk controls.

The role emphasizes hands-on testing, vulnerability management, and continuous learning within a dynamic, global team.