AppSec Engineer: Secure-by-Design in the Cloud

Magentateam; Poland; Remote; PLN 180,000 - 270,000; Full time

Job summary

T-Mobile Poland is seeking an Application Security Expert to safeguard our systems and data. You will collaborate with IT, Cloud and development teams to ensure robust security across web, mobile, and cloud deployments.

With 4+ years in application security and software development, you will contribute to secure-by-design architectures, review threat models, and define standardized security guidelines and frameworks for multiple platforms.

Qualifications

• 4+ years of full-time commercial application security experience.
• 4+ years of software development experience, preferably in cloud environments.
• Experience architecting and building application security across web, mobile, and desktop stacks.
• Prior threat modelling and secure design review experience.
• Familiarity with cloud security best practices, especially AWS.
• Kubernetes/container security know-how.
• Knowledge of OWASP Top 10 and cloud security gaps.
• Knowledge of OWASP Testing Guide, OWASP ASVS, NIST and SANS Top 20.
• Proficiency with modern web stacks (HTTP, HTML5, AJAX, REST).
• Understanding cryptography concepts and secure password storage.
• Knowledge of OAuth, SAML, and OIDC flows.

Responsibilities

• Identify opportunities to automate and standardize application security controls and work with CI/CD teams.
• Analyze source code to mitigate weaknesses and vulnerabilities.
• Create guidelines and application security standards.
• Review automated security testing results.
• Perform software architecture design reviews for on-prem and cloud deployments.
• Collaborate with engineering to architect secure-by-design solutions.
• Define, document, and supervise implementation of security guidelines.
• Build frameworks and libraries to provide security by default.

Skills

Application security

Cloud security

Threat modelling

Secure design reviews

Kubernetes security

OWASP Top 10

OWASP ASVS

NIST & SANS Top 20

Web technologies

cryptography basics

OAuth / SAML / OIDC

Tools

AWS

Kubernetes

Job description

T-Mobile Poland is seeking an Application Security Expert to safeguard our systems and data. You will collaborate with IT, Cloud and development teams to ensure robust security across web, mobile, and cloud deployments.

With 4+ years in application security and software development, you will contribute to secure-by-design architectures, review threat models, and define standardized security guidelines and frameworks for multiple platforms.